Vulnerability in markdown-to-jsx

Author: artolaCreated Oct 16, 2024Updated Jan 3, 2025

Vulnerability in markdown-to-jsx

This package uses markdown-to-jsx ^6.11.4 affected by:

Issue: Cross site scripting in markdown-to-jsx URL: https://github.com/advisories/GHSA-4wx3-54gh-9fr9 Severity: moderate Vulnerable Versions: <7.4.

See upstream issue: https://github.com/quantizor/markdown-to-jsx/issues/610

Solution upgrade to v7

From the release notes of such package, v7 is a rewrite in TS. I did an upgrade using resolutions and no side-effects were found. I do propose to bump markdown-to-jsx to the latest ^7.5.0 and proceed if tests are passing.

Source: styleguidist/react-styleguidist