New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

#

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Jump to bottom

Security issue in marked 0.3.6 #77

Open

elwynelwyn opened this issue Oct 3, 2017 · 0 comments

elwynelwyn commented Oct 3, 2017

Node Security project has flagged Marked 0.3.6 as insecure.

https://nodesecurity.io/advisories/531

This in turn makes angular-marked insecure, and causes our build to fail.

Marked is no longer maintained by the looks of things:

markedjs/marked#938 (comment)

Would be great if the underlying library this project uses could be swapped, perhaps to the suggestion here:

# for free to join this conversation on GitHub. Already have an account? # to comment