https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 15:02:31 +0000 https://vulnerability.circl.lu/vuln/cve-2014-3743 <p>Multiple cross-site scripting (XSS) vulnerabilities in the Marked module before 0.3.1 for Node.js allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) gfm codeblocks (language) or (2) javascript url&#39;s.</p> <p>Multiple cross-site scripting (XSS) vulnerabilities in the Marked module before 0.3.1 for Node.js allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) gfm codeblocks (language) or (2) javascript url&#39;s.</p> https://vulnerability.circl.lu/vuln/cve-2014-3743 https://vulnerability.circl.lu/vuln/ghsa-9cw2-jqp5-7x39 <p><strong>Affected:</strong> npm: marked</p> <p>Versions 0.3.0 and earlier of `marked` are affected by two cross-site scripting vulnerabilities, even when `sanitize: true` is set.</p> <p>The attack vectors for this vulnerability are GFM Codeblocks and JavaScript URLs.</p> <p>## Recommendation</p> <p>Upgrade to version 0.3.1 or later.</p> <p><strong>Affected:</strong> npm: marked</p> <p>Versions 0.3.0 and earlier of `marked` are affected by two cross-site scripting vulnerabilities, even when `sanitize: true` is set.</p> <p>The attack vectors for this vulnerability are GFM Codeblocks and JavaScript URLs.</p> <p>## Recommendation</p> <p>Upgrade to version 0.3.1 or later.</p> https://vulnerability.circl.lu/vuln/ghsa-9cw2-jqp5-7x39