Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

remarkjs/remark

              main @ 6c18384
            

Fixes

CVEs

HIGH

Peak severity

Highlights

Cross-Site Scripting (XSS): 3 prior fixes. Scrutinize any change in this area.

lib/marked.js: most-fixed (3 issues). Treat as high-risk during review.

3 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Cross-Site Scripting (XSS): HTML sanitization can be bypassed depending on option combinations (e.g., enabling both 'sanitize' and 'pedantic' modes), letting raw HTML tokens bypass filters and reach the final rendered output.

Cross-Site Scripting (XSS): Attackers can execute arbitrary scripts via markdown links containing malicious URI schemes (such as javascript:) if sanitization options are not consistently applied during link token generation.

Denial of Service: Specific combinations of tabs, spaces, and list-item markers trigger fatal parser errors or infinite loops, causing the Node.js process to crash when handling untrusted Markdown input.