Markdown-it-highlightjs Project Markdown-it-highlightjs — known CVE vulnerabilities

Every CVE whose affected-product data names Markdown-it-highlightjs Project Markdown-it-highlightjs, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2020-7773 — CVSS 6.5 (medium): This affects the package markdown-it-highlightjs before 3.3.1. It is possible insert malicious JavaScript as a value of lang in the…