shd101wyy vscode-markdown-preview-enhanced

• CVE-2026-54702 High 7.3 Markdown Preview Enhanced: Blind Command Dispatch via Unvalidated Webview Message Handler 0.3%
• CVE-2026-54701 Medium 6.9 Markdown Preview Enhanced: Stored XSS via Unsanitized `.crossnote/head.html` Injection in Webview 0.3%
• CVE-2026-54703 Medium 5.8 Markdown Preview Enhanced: Arbitrary File Write via updateMarkdown Command Without Path Validation 0.3%
• CVE-2026-54566 High 8.5 Markdown Preview Enhanced: Remote Code Execution via VM Sandbox Escape in `.crossnote/config.js` and `.crossnote/parser.js` 0.3%
• CVE-2026-54525 High 8.8 Markdown Preview Enhanced: One Click RCE via Markdown Link Command Injection on Windows 0.4%