@stoplight/markdown-viewer (>=3.1.0, <=3.3.0) potentially affected by unknown CVE via @stoplight/markdown (2.2.3)

@stoplight/markdown NPM version 2.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on @stoplight/markdown and may be impacted: - @stoplight/markdown-viewer =3.1.0, =3.3.0 Source cves: unknown CVE Source advisory: SNYK:JS-STOPLIGHTMARKDOWN-1078260...

Cross-site Scripting (XSS)

Overview @stoplight/markdown is an Useful functions when working with Markdown. Leverages the Unified / Remark ecosystem under the hood. Affected versions of this package are vulnerable to Cross-site Scripting XSS. It is possible to inject malicious JavaScript as part of the markdown feature of...