Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:npm/docsify@4.11.5
purl pkg:npm/docsify@4.11.5
Next non-vulnerable version 4.12.0
Latest non-vulnerable version 4.12.2
Risk 3.1
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-xy6c-gr7v-5ygs
Aliases:
CVE-2021-23342
GHSA-2mm9-c2fx-c7m4
Cross-site Scripting It is possible to bypass the remediation done by CVE-2020-7680 and execute malicious JavaScript through the following methods 1) When parsing HTML from remote URLs, the HTML code on the main page is sanitized, but this sanitization is not taking place in the sidebar. 2) The isURL external check can be bypassed by inserting more `////` characters
4.12.0
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-04T20:45:13.390904+00:00 GitLab Importer Affected by VCID-xy6c-gr7v-5ygs https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/docsify/CVE-2021-23342.yml 38.6.0