| Package | Affected versions | Patched versions |
|---|---|---|
| remarkable | ≤ 1.6.2 | |
| remarkable | < 1.7.0 | 1.7.0 |
Affected versions of remarkable are vulnerable to cross-site scripting. Vulnerable versions of the package allow the use of data: URIs in links, and can therefore execute javascript.
[link](data:text/html,<script>alert('0')</script>)
Update to v1.7.0 or later
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free