Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2014-10065
4.3
MEDIUMCVSS v2
Severity scale
010
Description
Certain input when passed into remarkable before 1.4.1 will bypass the bad protocol check that disallows the javascript: scheme allowing for javascript: url's to be injected into the rendered content.
remarkable
NPMMarkdown parser, done right. 100% Commonmark support, extensions, syntax plugins, high speed - all in one.
NPMMarkdown parser, done right. 100% Commonmark support, extensions, syntax plugins, high speed - all in one.< 1.4.1NVD
jonschlinkert/remarkable
GitHubMarkdown parser, done right. Commonmark support, extensions, syntax plugins, high speed - all in one. Gulp and metalsmith plugins available. Used by Facebook, Docusaurus and many others! Use https://github.com/breakdance/breakdance for HTML-to-markdown conversion. Use https://github.com/jonschlinkert/markdown-toc to generate a table of contents.
GitHubMarkdown parser, done right. Commonmark support, extensions, syntax plugins, high speed - all in one. Gulp and metalsmith plugins available. Used by Facebook, Docusaurus and many others! Use https://github.com/breakdance/breakdance for HTML-to-markdown conversion. Use https://github.com/jonschlinkert/markdown-toc to generate a table of contents.< 1.4.1NVD
Crates.io
RubyGems