Name of the Vulnerable Software and Affected Versions mrk.js versions prior to 2.0.1

Description The issue concerns cross-site scripting (XSS) that occurs when markdown is converted to HTML.

Recommendations Update to version 2.0.1 or later and use mark.sanitizeURL() for any src and href attributes when extending the markdown.