CVE-2025-24981

MDC is a tool to take regular Markdown and write documents interacting deeply with a Vue component. In affected versions unsafe parsing logic of the URL from markdown can lead to arbitrary JavaScript code due to a bypass to the existing guards around the `javascript:` protocol scheme in the URL. The parsing logic implement in `props.ts` maintains a deny-list approach to filtering potential malicious payload. It does so by matching protocol schemes like `javascript:` and others. These security guards can be bypassed by an adversarial that provides JavaScript URLs with HTML entities encoded via hex string. Users who consume this library and perform markdown parsing from unvalidated sources could result in rendering vulnerable XSS anchor links. This vulnerability has been addressed in version 0.13.3 and all users are advised to upgrade. There are no known workarounds for this vulnerability.

• CWE-79

• https://github.com/nuxt-modules/mdc/blob/main/src/runtime/parser/utils/props.ts#L16
• https://github.com/nuxt-modules/mdc/commit/99097738b5561639e9bf247c55d8103236618bf3
• https://github.com/nuxt-modules/mdc/security/advisories/GHSA-j82m-pc2v-2484

Published

Feb 6, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-24974DataEase is an open source business intelligence and data vi…6.5
• CVE-2025-24975Firebird is a relational database. Prior to snapshot version…8.8
• CVE-2025-24976Distribution is a toolkit to pack, ship, store, and deliver …6.6
• CVE-2025-24977OpenCTI is an open cyber threat intelligence (CTI) platform.…9.1
• CVE-2025-2498An improper access control in Gitlab EE affecting all versio…4.3
• CVE-2025-24980pimcore/admin-ui-classic-bundle provides a Backend UI for Pi…5.3
• CVE-2025-24982Cross-site request forgery vulnerability exists in Activity …4.3
• CVE-2025-24983Use after free in Windows Win32 Kernel Subsystem allows an a…7
• CVE-2025-24984Insertion of sensitive information into log file in Windows …4.6
• CVE-2025-24985Integer overflow or wraparound in Windows Fast FAT Driver al…7.8
• CVE-2025-24986Improper isolation or compartmentalization in Azure PromptFl…6.5
• CVE-2025-24987Out-of-bounds read in Windows USB Video Driver allows an aut…6.8