Remarkable Node Module (Hackerone) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2018-06-04. Vendor: Hackerone.

CVEs of Remarkable Node Module

• CVE-2017-16006 - CVSS 6.1 (medium), 2018-06-04: Remarkable is a markdown parser. In versions 1.6.2 and lower, remarkable allows the use of `data:` URIs in links and can therefore execute javascript.
• CVE-2014-10065 - CVSS 6.1 (medium), 2018-05-31: Certain input when passed into remarkable before 1.4.1 will bypass the bad protocol check that disallows the javascript: scheme allowing for javascript: url's…