CVE-2025-7969
Markdown-it 14.1.0 - Cross-site scripting (XSS)
Résumé
Markdown-it 14.1.0 - Cross-site scripting (XSS)
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in markdown-it allows Cross-Site Scripting (XSS). This vulnerability is associated with program files lib/renderer.mjs.
This issue affects markdown-it: 14.1.0. NOTE: the Supplier does not consider this issue to be a vulnerability.
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2025-7969 node-markdown-it
- Ubuntu UBUNTU-CVE-2025-7969 node-markdown-it
Références
- advisory fluidattacks.com
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- report github.com
- web registry.npmjs.org