Skip to content
OpenAdvisories

Package · npm

markdown-to-jsx

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High —
    GHSA-ccrp-c664-8p4j

    Cross-Site Scripting in markdown-to-jsx

    Versions of `markdown-to-jsx` prior to 6.11.4 are vulnerable to Cross-Site Scripting. Due to insufficient input sanitization the package may render output containing malicious JavaScript. This vulnerability can be exploited through input of links containing `…

    markdown-to-jsx npm