Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Marked potential security vulnerabilities

See original GitHub issue

Deployment type

(select the type below by replacing the space with an x)

[] Cloud Foundry Application (cf push)
Kubernetes, using a helm chart
Docker, using docker compose
Docker, single container deploying all components
Other (please provide below)

screenshot from 2018-01-10 12-09-17

Apparently updating Marked to the latest release ^0.3.9 fixes the XSS vulnerabilities.

Expected behaviour

Actual behaviour

Steps to reproduce the behavior

Log output covering before error and any error statements

Insert log here

Issue Analytics

State:
Created 6 years ago
Comments:6 (6 by maintainers)

Top GitHub Comments

1reaction

irfanhabibcommented, Jan 10, 2018

@hamzahamidi It is indeed in master, but as I said, running npm install should remove it.

However, I’ve raised a PR that just removes that specific dependency from the package-lock.json

0reactions

hamzahamidicommented, Jan 10, 2018

PR: https://github.com/SUSE/stratos-ui/pull/1433

Top Results From Across the Web

10 Common Web Security Vulnerabilities - Toptal

Don't suffer through a security breach—take action before any problems arise. Master these 10 common web security vulnerabilities now.

Vulnerabilities, Exploits, and Threats at a Glance - Rapid7

A Security Vulnerability is a weakness, flaw, or error found within a security system that has the potential to be leveraged by a...

Known Exploited Vulnerabilities Catalog | CISA

Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software ...

Potential Vulnerability - an overview | ScienceDirect Topics

3.2 Threat model. Threat modelling is the process used to analyse and assess any potential vulnerabilities that may undermine a systems security. The...

Marked Project Marked : CVE security vulnerabilities, versions ...

This page lists vulnerability statistics for all versions of Marked Project Marked. Vulnerability statistics provide a quick overview for security ...