Skip to content
OpenAdvisories

Vendor

syntax-tree

1 known vulnerabilities.

Products

mdast-util-to-hast 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.9
    CVE-2025-66400

    mdast-util-to-hast unsanitized class attribute

    mdast-util-to-hast is an mdast utility to transform to hast. From 13.0.0 to before 13.2.1, multiple (unprefixed) classnames could be added in markdown source by using character references. This could make rendered user supplied markdown code elements appear l…

    syntax-tree mdast-util-to-hast mdast-util-to-hast npm