Description
This affects all versions of package markdown-it-toc. The title of the generated toc and the contents of the header are not escaped.
Remediation
References
https://security.snyk.io/vuln/SNYK-JS-MARKDOWNITTOC-1044067
Related Vulnerabilities
CVE-2021-3918 Vulnerability in npm package json-schema
CVE-2022-24697 Vulnerability in maven package org.apache.kylin:kylin-core-common
CVE-2020-7754 Vulnerability in maven package org.webjars.npm:npm-user-validate
CVE-2020-28503 Vulnerability in npm package copy-props
CVE-2019-20364 Vulnerability in maven package org.igniterealtime.openfire:xmppserver