https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 23 Oct 2026 18:08:39 +0000 https://cve.radiocsirt.org/vuln/cnvd-2018-14532 cnvd-2018-14532 https://cve.radiocsirt.org/vuln/cnvd-2018-14532 https://cve.radiocsirt.org/vuln/euvd-2026-183015 EUVD-2026-183015 https://cve.radiocsirt.org/vuln/euvd-2026-183015 https://cve.radiocsirt.org/vuln/fkie_cve-2017-16006 <p>Remarkable is a markdown parser. In versions 1.6.2 and lower, remarkable allows the use of `data:` URIs in links and can therefore execute javascript.</p> <p>Remarkable is a markdown parser. In versions 1.6.2 and lower, remarkable allows the use of `data:` URIs in links and can therefore execute javascript.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-16006 https://cve.radiocsirt.org/vuln/ghsa-mrmf-qwxg-7c3h <p><strong>Affected:</strong> npm: remarkable</p> <p>Affected versions of `remarkable` are vulnerable to cross-site scripting. Vulnerable versions of the package allow the use of `data:` URIs in links, and can therefore execute javascript.</p> <p>## Proof of Concept</p> <p>```markdown [link](data:text/html,&lt;script&gt;alert(&#39;0&#39;)&lt;/script&gt;) ```</p> <p>## Recommendation</p> <p>Update to v1.7.0 or later</p> <p><strong>Affected:</strong> npm: remarkable</p> <p>Affected versions of `remarkable` are vulnerable to cross-site scripting. Vulnerable versions of the package allow the use of `data:` URIs in links, and can therefore execute javascript.</p> <p>## Proof of Concept</p> <p>```markdown [link](data:text/html,&lt;script&gt;alert(&#39;0&#39;)&lt;/script&gt;) ```</p> <p>## Recommendation</p> <p>Update to v1.7.0 or later</p> https://cve.radiocsirt.org/vuln/ghsa-mrmf-qwxg-7c3h https://cve.radiocsirt.org/vuln/gsd-2017-16006 gsd-2017-16006 https://cve.radiocsirt.org/vuln/gsd-2017-16006