Description
Remarkable is a markdown parser. In versions 1.6.2 and lower, remarkable allows the use of `data:` URIs in links and can therefore execute javascript.
Remediation
References
https://github.com/jonschlinkert/remarkable/issues/227
https://nodesecurity.io/advisories/319
Related Vulnerabilities
CVE-2023-40167 Vulnerability in maven package org.eclipse.jetty:jetty-http
CVE-2022-45401 Vulnerability in maven package org.jenkinsci.plugins:associated-files
CVE-2022-2900 Vulnerability in maven package org.webjars.npm:parse-url
CVE-2019-10773 Vulnerability in maven package org.webjars.npm:yarn
CVE-2021-30246 Vulnerability in maven package org.webjars.bowergithub.kjur:jsrsasign