Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:npm/docsify@4.12.0
purl pkg:npm/docsify@4.12.0
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-xy6c-gr7v-5ygs Cross-site Scripting It is possible to bypass the remediation done by CVE-2020-7680 and execute malicious JavaScript through the following methods 1) When parsing HTML from remote URLs, the HTML code on the main page is sanitized, but this sanitization is not taking place in the sidebar. 2) The isURL external check can be bypassed by inserting more `////` characters CVE-2021-23342
GHSA-2mm9-c2fx-c7m4

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-04T17:32:29.014191+00:00 GithubOSV Importer Fixing VCID-xy6c-gr7v-5ygs https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/03/GHSA-2mm9-c2fx-c7m4/GHSA-2mm9-c2fx-c7m4.json 38.6.0
2026-06-04T16:20:49.322974+00:00 GitLab Importer Fixing VCID-xy6c-gr7v-5ygs https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/docsify/CVE-2021-23342.yml 38.6.0