Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2019-12043
4.3
MEDIUMCVSS v2
Published
May 13, 2019
Affected
7 projects
Assigned by
MITRE
Severity scale
010
Description
In remarkable 1.7.1, lib/parser_inline.js mishandles URL filtering, which allows attackers to trigger XSS via unprintable characters, as demonstrated by a \x0ejavascript: URL.
remarkable
NPMMarkdown parser, done right. 100% Commonmark support, extensions, syntax plugins, high speed - all in one.
NPMMarkdown parser, done right. 100% Commonmark support, extensions, syntax plugins, high speed - all in one.= 1.7.1, < 1.7.2NVD
jonschlinkert/remarkable
GitHubMarkdown parser, done right. Commonmark support, extensions, syntax plugins, high speed - all in one. Gulp and metalsmith plugins available. Used by Facebook, Docusaurus and many others! Use https://github.com/breakdance/breakdance for HTML-to-markdown conversion. Use https://github.com/jonschlinkert/markdown-toc to generate a table of contents.
GitHubMarkdown parser, done right. Commonmark support, extensions, syntax plugins, high speed - all in one. Gulp and metalsmith plugins available. Used by Facebook, Docusaurus and many others! Use https://github.com/breakdance/breakdance for HTML-to-markdown conversion. Use https://github.com/jonschlinkert/markdown-toc to generate a table of contents.= 1.7.1, < 1.7.2NVD
Crates.io
RubyGems