search

code-farmer-i / vue-markdown-editor

A markdown editor built on Vue
https://code-farmer-i.github.io/vue-markdown-editor/
MIT License
1.1k stars 109 forks source link

Security Issue in "markdown-it" #144

Open JNPLZ opened 2 years ago

JNPLZ commented 2 years ago

Hello,

npm audit shows a vulnerability in the "markdown-it" sub package. Could you please update "@vuepress/markdown" to fix the issue?

Thank you!

markdown-it │ Uncontrolled Resource Consumption in markdown-it │ @kangc/v-md-editor>@vuepress/markdown>markdown-it │ moderate │ https://github.com/advisories/GHSA-6vfc-qv3f-vr6c

JNPLZ commented 2 years ago

Hi there, any chance on a fix for the vulnerability soon?

JNPLZ commented 2 years ago

Hi, there is a Pull Request from the dependency bot which would solve the issue. Could you please merge it? @code-farmer-i

https://github.com/code-farmer-i/vue-markdown-editor/pull/139