https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 24 Oct 2026 04:03:25 +0000 https://cve.radiocsirt.org/vuln/cve-2020-7773 <p><strong>Affected:</strong> markdown-it-highlightjs</p> <p>This affects the package markdown-it-highlightjs before 3.3.1. It is possible insert malicious JavaScript as a value of lang in the markdown-it-highlightjs Inline code highlighting feature. const markdownItHighlightjs = require(&#34;markdown-it-highlightjs&#34;); const md = require(&#39;markdown-it&#39;); const reuslt_xss = md() .use(markdownItHighlightjs, { inline: true }) .render(&#39;console.log(42){.&#34;&gt;js}&#39;); console.log(reuslt_xss);</p> <p><strong>Affected:</strong> markdown-it-highlightjs</p> <p>This affects the package markdown-it-highlightjs before 3.3.1. It is possible insert malicious JavaScript as a value of lang in the markdown-it-highlightjs Inline code highlighting feature. const markdownItHighlightjs = require(&#34;markdown-it-highlightjs&#34;); const md = require(&#39;markdown-it&#39;); const reuslt_xss = md() .use(markdownItHighlightjs, { inline: true }) .render(&#39;console.log(42){.&#34;&gt;js}&#39;); console.log(reuslt_xss);</p> https://cve.radiocsirt.org/vuln/cve-2020-7773