Skip to content
OpenAdvisories

Package · Hex

earmark

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 4.8
    CVE-2026-48591

    Stored XSS via unescaped HTML attribute values in earmark

    Improper Neutralization of Script in Attributes in a Web Page vulnerability in pragdave earmark allows stored cross-site scripting via unescaped HTML attribute values. 'Elixir.Earmark.Transform':_make_att1/2 in lib/earmark/transform.ex splices attribute value…

    pragdave earmark earmark Hex