EPSS
Percentile
37.3%
remarkable is vulnerable to cross-site scripting (XSS) attacks. Attackers can bypass the URL validation via unprintable characters which will allow a malicious user to inject and excecute arbitary Javascript in a victim’s browser.
github.com/dominykas/remarkable/commit/f6e8b3ab298034d810a82a6ebb7b17882e3154cd
github.com/jonschlinkert/remarkable/issues/332