CVE-2020-28455: Markdown-It-Toc Project Markdown-It-Toc

Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days.

This affects all versions of package markdown-it-toc. The title of the generated toc and the contents of the header are not escaped.

Affected products

• Markdown-It-Toc Project Markdown-It-Toc: any version

Published 2022-07-25. Last modified 2026-06-17.