CVE-2016-10531
1 advisory.
npm/marked CVE-2016-10531: medium 6.1
Sanitization bypass using HTML Entities in marked
Action: Upgrade marked to 0.3.6 or later.
npm i marked@0.3.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.3.6 | - |
Fixed versions
| 0.3.6 |
Sources
- osv: GHSA-vfvf-mqq8-rwqc
- https://nvd.nist.gov/vuln/detail/CVE-2016-10531
- https://github.com/chjj/marked/pull/592
- https://github.com/chjj/marked/pull/592/commits/2cff85979be8e7a026a9aca35542c470cf5da523
- https://github.com/advisories/GHSA-vfvf-mqq8-rwqc
- https://www.npmjs.com/advisories/101
CVE-2016-10531 · published · modified · JSON