GHSA-7px7-7xjx-hxm8
- Severity
- Moderate
- CVSS
- 6.1 · CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- CISA KEV
- Not in the cached KEV catalog
- EPSS
- No cached EPSS score
Affected and fixed versions
- Introduced 0 · fixed in 0.3.7
Plain-language text is shown only when it is already cached. This page does not generate it.
Marked vulnerable to XSS from data URIs
marked version 0.3.6 and earlier is vulnerable to an XSS attack in the data: URI parser.
Aliases: CVE-2017-1000427
Advisory on OSV.dev · published 2018-01-04 · modified 2023-11-08
- https://nvd.nist.gov/vuln/detail/CVE-2017-1000427
- https://github.com/advisories/GHSA-7px7-7xjx-hxm8
- https://github.com/markedjs/marked
- https://lists.fedoraproject.org/archives/list/[email protected]/message/BO2RMVVZVV6NFTU46B5RYRK7ZCXYARZS
- https://lists.fedoraproject.org/archives/list/[email protected]/message/M6BJG6RGDH7ZWVVAUFBFI5L32RSMQN2S
- https://snyk.io/vuln/npm:marked:20170112