Cross-site Scripting (XSS) via Data URIs [SEVERITY: HIGH]

[pixelass]

https://www.bithound.io/github/sinnerschrader/esdoc-custom-theme/master/dependencies/npm/esdoc-publish-html-plugin#security-advisories

Discovered in a nested dependency:esdoc-publish-html-plugin@1.1.0marked@0.3.6

https://snyk.io/vuln/npm:marked:20170112?utm_source=bithound

Cross-site Scripting (XSS) via Data URIs

Affecting marked package, versions <0.3.7

[andrevenancio]

any updates on this?

[pixelass]

@andrevenancio this repo is unmaintained until the owner responds.

Try working with https://github.com/esdoc2

[andrevenancio]

ohhh didn't realised nobody was looking after this repo.. what's the diff with esdoc2 ?

[pixelass]

esdoc2 is a fork of esdoc. It was created due to the lack of response and amount of open issues.