npm/discord-markdown: high
discord-html not escaping HTML code blocks when lacking a language identifier
Action: Upgrade discord-markdown to 2.3.1 or later.
npm i discord-markdown@2.3.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.3.1 | - |
Fixed versions
| 2.3.1 |
Sources
- osv: GHSA-9r27-994c-4xch
- https://github.com/brussell98/discord-markdown/security/advisories/GHSA-9r27-994c-4xch
- https://github.com/brussell98/discord-markdown/issues/13
- https://github.com/brussell98/discord-markdown/commit/7ce2eb66520815dcf5e97ef2bc8a2d5979da66e7
published · modified · JSON