Open
Description
The dependency Remarkable has been updated to use autolinker v3.0.0+ as there was a DOS vulnerability in autolinker v0.28.1 (https://snyk.io/vuln/SNYK-JS-AUTOLINKER-73494).
Updating Remarkable to v2.0.0+ will resolve the issue.
Old - https://github.com/jonschlinkert/remarkable/blob/v1.7.4/package.json#L66
New - https://github.com/jonschlinkert/remarkable/blob/v2.0.0/package.json#L81
Currently unable to install markdown-toc due to older version of autolinker being quarantined on corporate npm registry.
Metadata
Assignees
Labels
No labels