@dormakaba/taibika-visual (>=0.1.0, <=1.6.5), cnpmjs.org (>=2.0.0-beta0, <=2.0.0-rc.9) +13 more potentially affected by CVE-2017-16006 via remarkable (>=1.3.0, <=1.6.2)

remarkable NPM version =1.3.0, =0.1.0, =2.0.0-beta0, =3.0.3, =0.0.2, =1.0.0, =0.0.1, =0.0.0, =0.2.11, =0.3.4, =1.0.0-alpha, =1.0.0-alpha.1, =1.5.0 Source cves: CVE-2017-16006 Source advisory: GHSA-MRMF-QWXG-7C3H...

CVE-2017-16006

Remarkable is a markdown parser. In versions 1.6.2 and lower, remarkable allows the use of data: URIs in links and can therefore execute javascript...

CVE-2017-16006

The CVE-2017-16006 issue affects remarkable before or equal to v1.6.2, where data: URIs in links can trigger JavaScript execution, enabling cross-site scripting. Impact is client-side, subject to whether the environment allows data: URI handling. Affected component: remarkable’s markdown parser; ...

@dormakaba/taibika-visual (>=0.1.0, <=1.6.5), cnpmjs.org (>=2.0.0-beta0, <=2.0.0-rc.9) +13 more potentially affected by CVE-2017-16006 via remarkable (>=1.3.0, <=1.6.2)

remarkable NPM version =1.3.0, =0.1.0, =2.0.0-beta0, =3.0.3, =0.0.2, =1.0.0, =0.0.1, =0.0.0, =0.2.11, =0.3.4, =1.0.0-alpha, =1.0.0-alpha.1, =1.5.0 Source cves: CVE-2017-16006 Source advisory: MEND:CVE-2017-16006...

CVE-2017-16006

Remarkable is a markdown parser. In versions 1.6.2 and lower, remarkable allows the use of data: URIs in links and can therefore execute javascript...