CVE-2020-28459
1 advisory.
npm/markdown-it-decorate CVE-2020-28459: medium 6.1, EPSS 0.61%
markdown-it-decorate vulnerable to cross-site scripting (XSS)
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 1.2.2 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-rhf5-2378-3w3w
- https://nvd.nist.gov/vuln/detail/CVE-2020-28459
- https://github.com/rstacruz/markdown-it-decorate/commit/a6b33ce79e9b8cddf6184c754713e6af65253909
- https://github.com/rstacruz/markdown-it-decorate
- https://security.snyk.io/vuln/SNYK-JS-MARKDOWNITDECORATE-1044068
CVE-2020-28459 · published · modified · JSON