Skip to content
OpenAdvisories

Product · GitHub

paste-markdown

1 known vulnerabilities.

All Critical High Medium Low Exploited only

1 result · Feed

  • Medium 6.5
    CVE-2021-37700

    Clipboard-based DOM-XSS

    @github/paste-markdown is an npm package for pasting markdown objects. A self Cross-Site Scripting vulnerability exists in the @github/paste-markdown before version 0.3.4. If the clipboard data contains the string `<table>`, a **div** is dynamically created, …

    GitHub paste-markdown @github/paste-markdown npm