Skip to content
OpenAdvisories

Package · npm

markdown-it-toc-and-anchor

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.5
    GHSA-x6m6-5hrf-fh6r

    Denial of Service in markdown-it-toc-and-anchor

    All versions of `markdown-it-toc-and-anchor` are vulnerable to Denial of Service. Parsing markdown containing `**text**+\n@[toc]` causes the application to enter and infinite loop. ## Recommendation No fix is currently available. Consider using an alternative…

    markdown-it-toc-and-anchor npm