CVE-2020-28459: Markdown-It-Decorate Project Markdown-It-Decorate

Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days.

This affects all versions of package markdown-it-decorate. An attacker can add an event handler or use javascript:xxx for the link.

Affected products

• Markdown-It-Decorate Project Markdown-It-Decorate: any version

Published 2022-07-25. Last modified 2026-06-17.