markdown-toc icon indicating copy to clipboard operation
markdown-toc copied to clipboard

Published 20 hours ago • verified publisher icon jonschlinkert

Remarkable Dependency Vulnerability

Open KarinBlanford opened this issue 5 years ago • 1 comments

The dependency Remarkable has been updated to use autolinker v3.0.0+ as there was a DOS vulnerability in autolinker v0.28.1 (https://snyk.io/vuln/SNYK-JS-AUTOLINKER-73494).

Updating Remarkable to v2.0.0+ will resolve the issue.

Old - https://github.com/jonschlinkert/remarkable/blob/v1.7.4/package.json#L66 New - https://github.com/jonschlinkert/remarkable/blob/v2.0.0/package.json#L81

Currently unable to install markdown-toc due to older version of autolinker being quarantined on corporate npm registry.

KarinBlanford avatar Dec 17 '19 18:12 KarinBlanford