CVE-2026-40201

Description

@diplodoc/search-extension 1.0.0 through 3.x before 3.0.3 allows stored XSS via the title in a .md file.

References

• https://github.com/diplodoc-platform/search-extension/pull/41
• https://github.com/diplodoc-platform/search-extension/releases
• https://github.com/diplodoc-platform/search-extension/releases/tag/v3.0.3