Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-3hp9-cv2c-r7gc
Summary
Multiple Content Injection Vulnerabilities
Marked comes with an option to sanitize user output to help protect against content injection attacks.

```sanitize: true```

Even if this option is set, marked is vulnerable to content injection in multiple locations if untrusted user input is allowed to be provided into marked and that output is passed to the browser.

Injection is possible in two locations

- gfm codeblocks (language)
- javascript url's
Aliases
0
alias CVE-2014-3743
Fixed_packages
0
url pkg:npm/marked@0.3.1
purl pkg:npm/marked@0.3.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/marked@0.3.1
Affected_packages
0
url pkg:npm/marked@0.3.0
purl pkg:npm/marked@0.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3hp9-cv2c-r7gc
1
vulnerability VCID-xdzq-65a6-67h5
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/marked@0.3.0
References
0
reference_url https://github.com/nodejs/security-wg/blob/main/vuln/npm/22.json
reference_id 22
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements
url https://github.com/nodejs/security-wg/blob/main/vuln/npm/22.json
Weaknesses
Exploits
Severity_range_score6.5 - 6.5
Exploitabilitynull
Weighted_severitynull
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-3hp9-cv2c-r7gc