Skip to content

Conversation

@mdesrosiers
Copy link
Contributor

The included version of marked contains a vulnerability (see https://nvd.nist.gov/vuln/detail/CVE-2021-21306
for details) which was addressed in 2.0.0. This change updates marked.js from https://github.com/markedjs/marked/blob/v2.0.0/lib/marked.js.

@ghost
Copy link

ghost commented Feb 25, 2021

CLA assistant check
All CLA requirements met.

@mjbvz mjbvz added this to the February 2021 milestone Feb 26, 2021
@mjbvz mjbvz merged commit d13b1a1 into microsoft:main Feb 26, 2021
@mjbvz
Copy link
Collaborator

mjbvz commented Feb 26, 2021

Thanks!

@github-actions github-actions bot locked and limited conversation to collaborators Apr 12, 2021
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants