search

vuejs / vuepress

📝 Minimalistic Vue-powered static site generator
https://vuepress.vuejs.org
MIT License
22.51k stars 4.76k forks source link

@vuepress/markdown: migrate to newer version of markdown-it #3181

Open DaanDL opened 11 months ago

DaanDL commented 11 months ago

Feature request

I received a message from or audit stating that there's a vulnerability breach in on of our packages through vuepress/markdown -> markdown-it

What problem does this feature solve?

Fixes a vulnerability in markdown-it.

How should this be implemented in your opinion?

The markdown-it depdendency should be updated to at least 12.3.2.

Are you willing to work on this yourself?

Yes