MediumVulnerability
GHSA-2658-85cv-9wwq: Mercury: Stored / DOM Cross-Site Scripting (XSS): mr.Markdown renders untrusted content as raw, unsanitized HTML
- Identifiers
- CVE-2026-111059GHSA-2658-85cv-9wwq
- Published
- Record updated
- Affected
- mercury >= 3.0.0, < 3.2.11
- Fixed in
- 3.2.11
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
Summary
Mercury's mr.Markdown widget converts input with python-markdown and no sanitization, and MarkdownWidget writes the result to the DOM via innerHTML without sanitization. When an app passes untrusted data to mr.Markdown, HTML or JavaScript in that data executes in the browser of whoever views the app, a stored or DOM-based XSS.
Mitigation
The source does not state a fix yet. Check the original advisory for updates.
Related items
- MediumGHSA-953h-535j-jg2v: agent-router: MCP session resume does not verify the embedded anti-hijacking subject; default Helm seed makes session IDs forgeableSimilar attack · GitHub Advisory Database
- InfoInside the Underground Market for Know Your Client ServicesSimilar attack · BleepingComputer
- MediumA hacker broke into John Deere and SharkNinja with an army of AI agentsSimilar attack · The Verge (AI)
- MediumCVE-2026-112081: hankcs HanLP deserialization through classpath in hanlp.loadSimilar attack · NVD/CVE Database
- MediumCVE-2026-111991: WongKinYiu yolov9 code injection via ONNX Metadata HandlerSimilar attack · NVD/CVE Database