marked vulnerabilities

A markdown parser built for speed

Latest version: 0.3.6

View on npm

Licenses detected

  • license: Unknown >=0.0.1 <0.3.1
  • license: MIT >=0.3.1
Vulnerability Vulnerable versions Snyk patch Published
  • H
Cross-site Scripting (XSS) via Data URIs 		<=0.3.6 Available 30 Jan, 2017
  • H
Content & Code Injection (XSS) 		<0.3.6 Available 20 Apr, 2016
  • M
VBScript Content Injection 		<=0.3.2 Available 30 Jan, 2014
  • H
Regular Expression Denial of Service (DoS) 		<=0.3.3 Available 30 Jan, 2014
  • M
Multiple Content Injection Vulnerabilities 		<=0.3.0 Not available 30 Jan, 2014
Report a new vulnerability

Find out if you have vulnerabilities that put you at risk.

Test your code