@digitalocean/do-markdownit

@digitalocean/do-markdownit

Releases34
Frequency1 month 3 days
Last Release
Markdown-It plugin for the DigitalOcean Community.

CVE History

CVEPublishedCVSS v3CVSS v2
5.4 MEDIUM

In the @digitalocean/do-markdownit package through 1.16.1 (in npm), the callout and fence_environment plugins perform .includes substring matching if allowedClasses or allowedEnvironments is a string (instead of an array).