Skip to main content
cve.nowby Sazabi
← npm
npmPackage

remarkable

4 known vulnerabilities, with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
4
Registry
npm

Advisories 4

  • In remarkable 1.7.1, lib/parser_inline.js mishandles URL filtering, which allows attackers to trigger XSS via unprintable characters, as…

    Affected: fixed in 1.7.2.

  • lib/common/html_re.js in remarkable 1.7.1 allows Regular Expression Denial of Service (ReDoS) via a CDATA section.

    Affected: fixed in 1.7.2.

  • Remarkable is a markdown parser.

    Affected: fixed in 1.7.0.

  • Certain input when passed into remarkable before 1.4.1 will bypass the bad protocol check that disallows the javascript: scheme allowing…

    Affected: fixed in 1.4.1.