← Back

Caret

caret

3 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Caret
caret

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Caret
1Caret
Jun 17, 2026
Jan 11, 2023
N/A· v4
9.6 CRITICAL· v3
N/A· v2
Caret is vulnerable to an XSS attack when the user opens a crafted Markdown file when preview mode is enabled. This directly leads to client-side code execution.
1Caret
1Caret
Jun 17, 2026
Jan 26, 2021
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
A specially crafted Markdown document could cause the execution of malicious JavaScript code in Caret Editor before 4.0.0-rc22.
1Caret
1Caret
Jun 17, 2026
Mar 22, 2019
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Caret before 2019-02-22 allows Remote Code Execution.