CVE-2022-43668

6.1 mediumEPSS 0.4%

Medium (6.1) in typora typora. EPSS 0.4% chance of exploitation in the next 30 days.

Typora versions prior to 1.4.4 fails to properly neutralize JavaScript code, which may result in executing JavaScript code contained in the file when opening a file with the affected product.

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 32% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2022-12-07
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

typora:typora

References

https://jvn.jp/en/jp/JVN26044739/index.html
https://typora.io/releases/all
https://jvn.jp/en/jp/JVN26044739/index.html
https://typora.io/releases/all

Check your stack JSON