Skip to content
OpenAdvisories

Package · npm

remark-html

1 known vulnerabilities.

1 result · Feed

  • Critical 10.0

    Cross site scripting via unsafe defaults in remark-html

    remark-html is an open source nodejs library which compiles Markdown to HTML. In affected versions the documentation of remark-html has mentioned that it was safe by default. In practice the default was never safe and had to be opted into. That is, user input…