CVE-2026-57530
Received Received - Intake

Stored XSS in Milkdown Markdown Editor

Publication date: 2026-07-24

Last updated on: 2026-07-24

Assigner: VulnCheck

Description
Milkdown before 7.21.3 contains a stored cross-site scripting vulnerability in the @milkdown/preset-commonmark and @milkdown/components packages that allows attackers with document write access to execute arbitrary JavaScript in the browser context of any user who opens the document or clicks a rendered link. The parseMarkdown runner stores raw URL values from the remark AST as href mark attributes without URL scheme validation, and the ineffective DOMPurify.sanitize call in edit-view.ts treats the bare URL string as a text node and returns it unchanged, allowing javascript: payloads to pass through the link-tooltip preview component and read-only mode anchor elements unmodified.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-24
Last Modified
2026-07-24
Generated
2026-07-25
AI Q&A
2026-07-24
EPSS Evaluated
N/A
NVD
CVE-2026-57530
EUVD
EUVD-2026-48735

Affected Vendors & Products

Showing 5 associated CPEs
Vendor Product Version / Range
milkdown milkdown to 7.21.3 (exc)
milkdown preset_commonmark *
milkdown components *
milkdown preset-commonmark to 7.21.3 (exc)
milkdown components to 7.21.3 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-79 The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-57530 is a stored cross-site scripting (XSS) vulnerability in Milkdown versions before 7.21.3. It exists in the @milkdown/preset-commonmark and @milkdown/components packages where raw URL values from the remark AST are stored as href attributes without validating the URL scheme. Attackers with document write access can inject malicious javascript: URLs that bypass DOMPurify.sanitize, allowing arbitrary JavaScript execution when users open documents or click rendered links.

Detection Guidance

This vulnerability is specific to the Milkdown editor versions before 7.21.3. To detect it, check the installed version of Milkdown in your system or application. If you are using a version prior to 7.21.3, your system is vulnerable. No specific network or system commands are provided in the context to detect this vulnerability directly.

Impact Analysis

If you use Milkdown versions before 7.21.3, attackers could inject malicious scripts into documents you create or view. When you or others interact with these documents, the scripts could execute in your browser, potentially stealing data, session cookies, or performing actions on your behalf. This could lead to account compromise, data theft, or unauthorized actions.

Compliance Impact

This vulnerability could lead to unauthorized data access or modification, violating GDPR's integrity and confidentiality principles or HIPAA's safeguards for protected health information. Organizations using vulnerable Milkdown versions may face compliance violations, legal penalties, or reputational damage if exploited.

Mitigation Strategies

Immediately update Milkdown to version 7.21.3 or later to mitigate the vulnerability. The fix includes sanitizing link hrefs and emoji HTML content to prevent XSS attacks. Ensure all users and systems using Milkdown are updated to the latest version.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-57530. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart