Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

GHSA-mg69-6j3m-jvgw

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-mg69-6j3m-jvgw

HTML Injection in marky-markdown All versions of `marky-markdown` are vulnerable to HTML Injection. The package fails to sanitize `style` attributes in `img` tags of the markdown input. This may allow attackers to affect the size of images in the rendered HTML. ## Recommendation This package is no longer maintained. Please upgrade to `@npmcorp/marky-markdown`

gitlab/npm/marky-markdown/GMS-2020-370

HTML Injection in marky-markdown All versions of `marky-markdown` are vulnerable to HTML Injection. The package fails to sanitize `style` attributes in `img` tags of the markdown input. This may allow attackers to affect the size of images in the rendered HTML. ## Recommendation This package is no longer maintained. Please upgrade to `@npmcorp/marky-markdown`