Homepage
About Snyk

remark-html@6.0.1 vulnerabilities

remark plugin to compile Markdown to HTML

Go back to all versions of this package
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the remark-html package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • C
Cross-site Scripting (XSS)

remark-html is a remark plugin to compile Markdown to HTML

Affected versions of this package are vulnerable to Cross-site Scripting (XSS). The documentation of remark-html has mentioned that it was safe by default. In practice, the default was never safe and had to be opted into. This means arbitrary HTML can be passed through leading to potential XSS attacks.

How to fix Cross-site Scripting (XSS)?

Upgrade remark-html to version 14.0.1, 13.0.2 or higher.

>=14.0.0 <14.0.1 <13.0.2
Go back to all versions of this package