Description
The package post-loader from 0.0.0 are vulnerable to Arbitrary Code Execution which uses a markdown parser in an unsafe way so that any javascript code inside the markdown input files gets evaluated and executed.
Remediation
References
https://snyk.io/vuln/SNYK-JS-POSTLOADER-2403737
Related Vulnerabilities
CVE-2020-7642 Vulnerability in npm package lazysizes
CVE-2023-26143 Vulnerability in npm package blamer
CVE-2021-44548 Vulnerability in maven package org.apache.solr:solr-core
CVE-2020-13973 Vulnerability in maven package com.mikesamuel:json-sanitizer
CVE-2023-24620 Vulnerability in maven package com.esotericsoftware.yamlbeans:yamlbeans