CVE-2022-43668: Typora

Medium severity, CVSS 6.1. EPSS: 0.4% chance of exploitation in the next 30 days.

Typora versions prior to 1.4.4 fails to properly neutralize JavaScript code, which may result in executing JavaScript code contained in the file when opening a file with the affected product.

Affected products

• Typora Typora: before 1.4.4 (fixed in 1.4.4)

Published 2022-12-07. Last modified 2026-06-17.