4 matches found
DEBIAN-CVE-2015-3295
markdown-it before 4.1.0 does not block data: URLs...
5.3CVSS7AI score0.01287EPSS
SaveExploits0References1
CVE-2015-3295
markdown-it before 4.1.0 does not block data: URLs, enabling potential HTML injection when rendering user-provided content. Affected: markdown-it versions prior to 4.1.0. Root cause: failure to block data: URLs in the rendering process. Impact: authoring or rendering content could lead to uninten...
5.3CVSS5.5AI score0.01287EPSS
SaveExploits0References3Affected Software1
20