Vulnerability · Published Oct 11, 2026 · Assigned by VulnCheck
CVE-2026-108723answer-me-with-html through 0.5.0 Symlink Following in Code Block src Embedding
Low 2.5
In plain English
A low-severity security flaw in answer-me-with-html from QingYunA. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 3% of all known vulnerabilities).
Severity (CVSS 3.1)2.5Low
Exploit odds (30 days)0.1%top 96.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
answer-me-with-html through 0.5.0 contains a link following vulnerability in the am CLI code block src= embedding, where localPath() checks only path text without resolving symlinks. Attackers can ship a repository with a symlink pointing outside the checkout so am render embeds readable external files into generated HTML, disclosing them when shared.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| QingYunA | answer-me-with-html | 0 – through 0.5.0 |
Weakness: CWE-59 · Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
References
- https://hackmd.io/@haind/answer-me-with-html-code-src-symlink-escape third-party-advisory
- https://github.com/QingYunA/answer-me-with-html/blob/b275eba8d4cc49bcb4bbc28459863f4b49a480f9/src/code.js#L74-L105 technical-description
- https://github.com/QingYunA/answer-me-with-html product
- VulnCheck Advisory: answer-me-with-html through 0.5.0 Symlink Following in Code Block src Embedding third-party-advisory