Description
The package post-loader from 0.0.0 are vulnerable to Arbitrary Code Execution which uses a markdown parser in an unsafe way so that any javascript code inside the markdown input files gets evaluated and executed.
Remediation
References
https://snyk.io/vuln/SNYK-JS-POSTLOADER-2403737
Related Vulnerabilities
CVE-2023-26486 Vulnerability in npm package vega
CVE-2021-3804 Vulnerability in npm package taro
CVE-2020-15095 Vulnerability in npm package npm
CVE-2017-16108 Vulnerability in npm package gaoxiaotingtingting
CVE-2022-41930 Vulnerability in maven package org.xwiki.platform:xwiki-platform-user-profile-ui