@digitalocean/do-markdownit

@digitalocean/do-markdownit

Releases37
Frequency1 month 1 week
Last Release
Markdown-It plugin for the DigitalOcean Community.

CVE History

CVEAffectedPublishedCVSS v3CVSS v2
<= 1.16.15.4 MEDIUM

In the @digitalocean/do-markdownit package through 1.16.1 (in npm), the callout and fence_environment plugins perform .includes substring matching if allowedClasses or allowedEnvironments is a string (instead of an array).