Markdown Preview Enhanced v0.6.5 and v0.19.6 for VSCode and Atom was discovered to contain a command injection vulnerability via the PDF file import function.
{
"cpe": [
"cpe:2.3:a:markdown_preview_enhanced_project:markdown_preview_enhanced:0.6.5:*:*:*:*:atom:*:*",
"cpe:2.3:a:markdown_preview_enhanced_project:markdown_preview_enhanced:0.6.5:*:*:*:*:vscode:*:*",
"cpe:2.3:a:markdown_preview_enhanced_project:markdown_preview_enhanced:0.19.6:*:*:*:*:atom:*:*",
"cpe:2.3:a:markdown_preview_enhanced_project:markdown_preview_enhanced:0.19.6:*:*:*:*:vscode:*:*"
],
"source": "CPE_FIELD",
"extracted_events": [
{
"introduced": "0"
},
{
"last_affected": "0.6.5"
},
{
"last_affected": "0.19.6"
}
]
}