Skip to content
OpenAdvisories

Package · npm

discord-markdown

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High —
    GHSA-9r27-994c-4xch

    discord-html not escaping HTML code blocks when lacking a language identifier

    ### Impact Any website using discord-markdown with user-generated markdown is vulnerable to having code injected into the page where the markdown is displayed. ### Patches This has been patched in version 2.3.1 ### Workarounds Escape the characters `<>&…

    discord-markdown npm