Versions 0.3.2 and earlier of marked are affected by a... · GHSA-32vw-r77c-gm67 · GitHub Advisory Database · GitHub

Versions 0.3.2 and earlier of marked are affected by a...

Moderate severity GitHub Reviewed Published Aug 3, 2020 to the GitHub Advisory Database • Updated Jan 9, 2023

Withdrawn This advisory was withdrawn on Aug 3, 2020

Package

marked (npm)

Affected versions

< 0.3.3

Patched versions

0.3.3

Description

Versions 0.3.2 and earlier of marked are affected by a cross-site scripting vulnerability even when sanitize:true is set.

References

Reviewed Jun 5, 2019

Published to the GitHub Advisory Database Aug 3, 2020

Withdrawn Aug 3, 2020

Last updated Jan 9, 2023