The package post-loader from 0.0.0 are vulnerable to Arbitrary Code Execution which uses a markdown parser in an unsafe way so that any javascript code inside the markdown input files gets evaluated and executed.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: snyk

Published: 2022-03-17T11:21:01.531778Z

Updated: 2024-09-17T00:52:18.366Z

Reserved: 2022-02-24T00:00:00

Link: CVE-2022-0748

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2022-03-17T12:15:07.923

Modified: 2024-11-21T06:39:18.880

Link: CVE-2022-0748

cve-icon Redhat

No data.