Skip to content
OpenAdvisories

Package · npm

markdown-to-jsx

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 6.1
    CVE-2024-21535

    Cross site scripting in markdown-to-jsx

    Versions of the package markdown-to-jsx before 7.4.0 are vulnerable to Cross-site Scripting (XSS) via the src property due to improper input sanitization. An attacker can execute arbitrary code by injecting a malicious iframe element in the markdown.

    markdown-to-jsx node-markdown-to-jsx node-markdown-to-jsx Debian Ubuntu npm
  • High —
    GHSA-ccrp-c664-8p4j

    Cross-Site Scripting in markdown-to-jsx

    Versions of `markdown-to-jsx` prior to 6.11.4 are vulnerable to Cross-Site Scripting. Due to insufficient input sanitization the package may render output containing malicious JavaScript. This vulnerability can be exploited through input of links containing `…

    markdown-to-jsx npm