{"items":[{"id":"CVE-2025-46655","published":"2025-04-26T00:00:00.000Z","updated":"2025-04-29T15:22:43.429Z","title":"CodiMD through 2.5.4 has a CSP-based protection mechanism against XSS through uploaded SVG documents containing JavaScript, but it can be bypassed in certain…","severity":"MEDIUM","score":4.9,"vendor":"HackMD","product":"CodiMD","kev":false,"epss":0.0025,"kevAdded":null},{"id":"CVE-2025-46654","published":"2025-04-26T00:00:00.000Z","updated":"2025-04-29T15:22:49.333Z","title":"CodiMD through 2.2.0 has a CSP-based protection mechanism against XSS through uploaded JavaScript content, but it can be bypassed by uploading a .html file…","severity":"MEDIUM","score":4.9,"vendor":"HackMD","product":"CodiMD","kev":false,"epss":0.00263,"kevAdded":null}]}