jstransformers / jstransformer-markdown-it

Markdown-It support for JSTransformers.

Home Page:http://npmjs.com/jstransformer-markdown-it

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

[SECURITY UPDATE] Uncontrolled Resource Consumption in markdown-it

webdiscus opened this issue · comments

Hello,

the npm install jstransformer-markdown-it shows the warning:

 severity vulnerabilities

the npm audit shows:

# npm audit report

markdown-it  <12.3.2
Severity: moderate
Uncontrolled Resource Consumption in markdown-it - https://github.com/advisories/GHSA-6vfc-qv3f-vr6c
No fix available
node_modules/markdown-it
  jstransformer-markdown-it  *
  Depends on vulnerable versions of markdown-it
  node_modules/jstransformer-markdown-it

2 moderate severity vulnerabilities

Some issues need review, and may require choosing a different dependency.

Can you please update the markdown-it to newest version?