Количество 2
Количество 2
CVE-2025-59717
5 месяцев назад
In the @digitalocean/do-markdownit package through 1.16.1 (in npm), the callout and fence_environment plugins perform .includes substring matching if allowedClasses or allowedEnvironments is a string (instead of an array).
CVSS3: 5.4
EPSS: Низкий
GHSA-2h8j-8r9p-849f
5 месяцев назад
@digitalocean/do-markdownit has Type Confusion vulnerability
CVSS3: 5.4
EPSS: Низкий
Уязвимостей на страницу
20
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2025-59717 In the @digitalocean/do-markdownit package through 1.16.1 (in npm), the callout and fence_environment plugins perform .includes substring matching if allowedClasses or allowedEnvironments is a string (instead of an array). | CVSS3: 5.4 | 0% Низкий | 5 месяцев назад | |
GHSA-2h8j-8r9p-849f @digitalocean/do-markdownit has Type Confusion vulnerability | CVSS3: 5.4 | 0% Низкий | 5 месяцев назад |
Уязвимостей на страницу
20