| Package | Affected versions | Patched versions |
|---|---|---|
| markdown-to-jsx | < 6.11.4 | 6.11.4 |
Versions of markdown-to-jsx prior to 6.11.4 are vulnerable to Cross-Site Scripting. Due to insufficient input sanitization the package may render output containing malicious JavaScript. This vulnerability can be exploited through input of links containing data or VBScript URIs and a base64-encoded payload.
Upgrade to version 6.11.4 or later.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free