Nixpkgs security tracker
Markdown-it 14.1.0 - Cross-site scripting (XSS)
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in markdown-it allows Cross-Site Scripting (XSS). This vulnerability is associated with program files lib/renderer.mjs. This issue affects markdown-it: 14.1.0.
References
-
https://fluidattacks.com/advisories/fito third-party-advisory
-
https://fluidattacks.com/advisories/fito third-party-advisory
-
https://fluidattacks.com/advisories/fito third-party-advisory
-
https://fluidattacks.com/advisories/fito third-party-advisory
Affected products
markdown-it
- ==14.1.0
Matching in nixpkgs
pkgs.python311Packages.markdown-it-py
Markdown parser in Python
pkgs.python312Packages.markdown-it-py
Markdown parser in Python
Package maintainers
-
@bhipple Benjamin Hipple <bhipple@protonmail.com>