search

Inscryb / inscryb-markdown-editor

A simple, beautiful, and embeddable JavaScript Markdown editor. Based off SimpleMDE by Sparksuite.
MIT License
90 stars 16 forks source link

Update marked dependency #45

Closed AlexKott closed 5 years ago

AlexKott commented 5 years ago

I'm submitting a...

Reproduction steps

  1. npm audit or yarn audit in any project using inscrybmde will show "1 moderate severity vulnerability", namely marked

Version information

Browser type and version: N/A InscrybMDE version: 1.11.6 (latest)

Fix

The fix is pretty simple: upgrade the marked dependency to ^0.6.2.

CWharton commented 5 years ago

Updated.