Markdown-It-Decorate Project Markdown-It-Decorate
1 CVEs affecting Markdown-It-Decorate Project Markdown-It-Decorate. Latest disclosed: 2022-07-25. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-28459 | High | 7.3 | 2022-07-25 | This affects all versions of package markdown-it-decorate. An attacker can add an event handler or use javascript:xxx for the link. |