Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2014-3743
6.1
MEDIUMCVSS v3
Published
January 6, 2020
CVSS v2
4.3 MEDIUM
Affected
4 projects
Assigned by
MITRE
Severity scale
010
Description
Multiple cross-site scripting (XSS) vulnerabilities in the Marked module before 0.3.1 for Node.js allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) gfm codeblocks (language) or (2) javascript url's.
@types/marked
NPMStub TypeScript definitions entry for marked, which provides its own types definitions
NPMStub TypeScript definitions entry for marked, which provides its own types definitions< 0.3.1NVD
markedjs/marked
GitHub
