Closed petebacondarwin closed 5 years ago
marked v0.7.0 has now been released, with another ReDoS fix and a few more breaking changes.
It would be great to see this merged soon, as all of my repos are currently failing npm audit
due to this warning.
Working on it... there is also the shelljs
issue.
Released as 0.28.0
Thanks! 🙇
The previous version of
marked
was vulnerable to a ReDoS attack.BREAKING CHANGES
There are a few relevant breaking changes with this latest version of
marked
. This only affects usage of therenderMarkdown()
service and themarked
nunjucks filter. Take a look through the marked release notes and check if this affects you.Fixes #280