Hackerone Remarkable Node Module
2 CVEs affecting Hackerone Remarkable Node Module. Latest disclosed: 2018-06-04. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-16006 | Medium | 6.1 | 2018-06-04 | Remarkable is a markdown parser. In versions 1.6.2 and lower, remarkable allows the use of `data:` URIs in links and can therefore execute javascript. |
CVE-2014-10065 | Medium | 6.1 | 2018-05-31 | Certain input when passed into remarkable before 1.4.1 will bypass the bad protocol check that disallows the javascript: scheme allowing for javascript: url's… |