CVE-2025-56683

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-56683
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-56683.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-56683
Published
2025-10-09T00:00:00Z
Modified
2026-08-12T03:51:10Z
Severity
  • 9.6 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

A cross-site scripting (XSS) vulnerability in the component /app/marketplace.html of Logseq v0.10.9 allows attackers to execute arbitrary code via injecting arbitrary Javascript into a crafted README.md file.

Database specific 
{
    "cna_assigner": "mitre",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/56xxx/CVE-2025-56683.json"
}
References

Affected packages

Git / github.com/logseq/logseq

Affected ranges

Type
GIT
Repo
https://github.com/logseq/logseq
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
4cdf49aedd8de073015b6945a529399c3bfa109a
Database specific
Show details 
{
    "source": "REFERENCES"
}

Affected versions

0.*
0.0.1-10
0.0.1-100
0.0.1-11
0.0.1-13
0.0.1-14
0.0.1-15
0.0.1-18
0.0.1-19
0.0.1-2
0.0.1-20
0.0.1-21
0.0.1-3
0.0.1-4
0.0.1-7
0.0.1-9
0.0.10
0.0.11
0.0.12
0.0.13
0.0.14
0.0.15
0.0.16
0.0.17
0.0.18
0.0.19
0.0.2.0
0.0.2.1
0.0.2.2
0.0.2.3
0.0.2.5
0.0.2.7
0.0.2.8
0.0.2.9
0.0.20
0.0.3.0
0.0.3.1
0.0.3.2
0.0.3.4
0.0.3.5
0.0.3.7
0.0.3.8
0.0.3.9
0.0.4.0
0.0.4.1
0.0.4.3
0.0.5.1
0.0.5.2
0.0.5.3
0.0.6
0.0.6.0
0.0.7
0.0.8
0.0.9
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
0.2.10
0.2.2
0.2.3
0.2.4
0.2.5
0.2.6
0.2.7
0.2.8
0.2.9
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.3.6
0.3.6-pre-release
0.3.7
0.3.8
0.3.9
0.4.0
0.4.0-perf
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.2
0.5.3
0.5.4
0.5.5
0.5.6
0.5.7
0.5.8
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
0.6.4
0.6.5
0.6.6
0.6.7
0.6.8
0.6.9
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.7.9
0.8.0
0.8.1
0.8.10
0.8.11
0.8.12
0.8.13
0.8.14
0.8.15
0.8.16
0.8.18
0.8.2
0.8.3
0.8.4
0.8.5
0.8.6
0.8.7
0.8.8
0.8.9
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
Other
github-action-repro
mobile-0.*
mobile-0.1
mobile-0.1.1
v0.*
v0.0.1-1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-56683.json"