npm/markdown-it-highlightjs CVE-2020-7773: medium 6.1
Cross-site Scripting in markdown-it-highlightjs
Action: Upgrade markdown-it-highlightjs to 3.3.1 or later.
npm i markdown-it-highlightjs@3.3.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.3.1 | - |
Fixed versions
| 3.3.1 |
Sources
- osv: GHSA-f246-xrrj-g8j6
- https://nvd.nist.gov/vuln/detail/CVE-2020-7773
- https://github.com/valeriangalliat/markdown-it-highlightjs/pull/14
- https://github.com/valeriangalliat/markdown-it-highlightjs/blob/v3.3.0/index.js%23L52
- https://snyk.io/vuln/SNYK-JS-MARKDOWNITHIGHLIGHTJS-1040461
CVE-2020-7773 · published · modified · JSON