Search results

Local file inclusion via file: image references in DOCX rendering

Status: Open.

#678 In vsch/flexmark-java;

· Str1ckl4nd opened on Jun 25, 2026

XSS via data: iframe src injection in YouTube embedded extension

Status: Open.

#677 In vsch/flexmark-java;

· Str1ckl4nd opened on Jun 25, 2026

XXE vulnerability in XmlFormatter and XmlDocxSorter (CWE-611)

Status: Open.

#676 In vsch/flexmark-java;

· elarasu opened on Jun 24, 2026

XSS via dangerous URI schemes in HtmlRenderer: HTML entity bypass and missing data:/vbscript: filters

Status: Open.

#675 In vsch/flexmark-java;

· dyingman1 opened on Jun 9, 2026

BSD-2-Clause license header missing from source files in latest release (0.64.8)

Status: Open.

#674 In vsch/flexmark-java;

· PathanTauheedKhan opened on May 23, 2026

where is the version of 0.64.8?

Status: Open.

#673 In vsch/flexmark-java;

· TansyTong opened on May 15, 2026

XSS via HTML entities in javascript: URLs

Status: Open.

#672 In vsch/flexmark-java;

· JorianWoltjer opened on May 3, 2026

goog

Status: Open.

#670 In vsch/flexmark-java;

· isikcelil40-lgtm opened on Apr 10, 2026

Markdown inside < details markdown="1" >< summary >.. does not work (Bold, ListItem)

Status: Open.

#669 In vsch/flexmark-java;

· k3b opened on Apr 3, 2026

Default Parser error (Repro included)

Status: Open.

#667 In vsch/flexmark-java;

· sjorn3 opened on Feb 24, 2026

Failed to transfer ** to strong label

Status: Open.

#665 In vsch/flexmark-java;

· WangyfCO opened on Dec 11, 2025

Integrate changes from commonmark-java

Status: Open.

#664 In vsch/flexmark-java;

· kwin opened on Nov 5, 2025