GHSA-32vw-r77c-gm67: Withdrawn Advisory: marked cross-site scripting vulnerability

August 3, 2020 (updated February 26, 2025)

Versions 0.3.2 and earlier of marked are affected by a cross-site scripting vulnerability even when sanitize:true is set.

References

github.com/advisories/GHSA-32vw-r77c-gm67
github.com/markedjs/marked/commit/fc372d1c6293267722e33f2719d57cebd67b3da1
github.com/markedjs/marked/issues/492
www.npmjs.com/advisories/24
www.npmjs.com/advisories/24/versions

Code Behaviors & Features

Detect and mitigate GHSA-32vw-r77c-gm67 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →