Withdrawn Advisory: marked cross-site scripting vulnerability · GHSA-32vw-r77c-gm67 · GitHub Advisory Database · GitHub

Withdrawn Advisory: marked cross-site scripting vulnerability

Moderate severity GitHub Reviewed Published Aug 3, 2020 to the GitHub Advisory Database • Updated Feb 26, 2025

Withdrawn This advisory was withdrawn on Aug 3, 2020

Package

marked (npm)

Affected versions

< 0.3.3

Patched versions

0.3.3

Description

Versions 0.3.2 and earlier of marked are affected by a cross-site scripting vulnerability even when sanitize:true is set.

References

Reviewed Jun 5, 2019

Published to the GitHub Advisory Database Aug 3, 2020

Withdrawn Aug 3, 2020

Last updated Feb 26, 2025