Homepage
About Snyk

markdown-it-toc-and-anchor@4.1.2 vulnerabilities

markdown-it plugin to add toc and anchor links in headings

Go back to all versions of this package
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the markdown-it-toc-and-anchor package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • H
Denial of Service (DoS)

markdown-it-toc-and-anchor is a markdown-it plugin to add toc and anchor links in headings.

Affected versions of this package are vulnerable to Denial of Service (DoS). Parsing markdown containing **text**+\n@[toc] causes the application to enter and infinite loop.

How to fix Denial of Service (DoS)?

Upgrade markdown-it-toc-and-anchor to version 4.2.0 or higher.

<4.2.0
Go back to all versions of this package