nuxt-content CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH nuxt-content CVE published 2026-09-16

CVE-2026-63671

CVE-2026-63671 is a high-severity vulnerability in the MDC tool, which allows for the execution of JavaScript code when processing Markdown documents. The vulnerability is caused by the use of parseMarkdown with allowDangerousHtml enabled by default and inadequate validation of attributes in the validateProps, validateProp, and unsafeLinkPrefix functions. Specifically, the validateProp function only check [truncated]