npm/editor.md CVE-2023-29641: medium 6.1, EPSS 0.43%

editor.md vulnerable to Cross-site Scripting

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GHSA-847g-34c5-vvm8
• https://nvd.nist.gov/vuln/detail/CVE-2023-29641
• https://github.com/pandao/editor.md/issues/985
• https://github.com/pandao/editor.md

CVE-2023-29641 · published 2023-05-01T18:30:23Z · modified 2023-11-08T04:12:20.877086Z · JSON