Skip to content
OpenAdvisories

Package · npm

ngx-md

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High —
    GHSA-xr53-m937-jr9c

    Cross-Site Scripting in ngx-md

    Versions of `ngx-md` prior to 6.0.3 are vulnerable to Cross-Site Scripting. Links are not properly restricted to http/https and can contain JavaScript which may lead to arbitrary code execution. Markdown input such as `[Click Me](javascript:alert('Injected!'%…

    ngx-md npm