MediumCVSS 5.3
EPSS 0.52%
Marp versions v0.0.10 and earlier may allow an attacker to access local resources and files using JavaScript.
Vendor
1 published CVE affecting marp, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
Newest publication first
Marp versions v0.0.10 and earlier may allow an attacker to access local resources and files using JavaScript.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.