marp-team vulnerabilities

Products

• @marp-team/marp-core 1

Latest marp-team CVEs

Newest publication first

1. CVE-2024-56510 Marp Core allows XSS by improper neutralization of HTML sanitization

   Published 2024-12-26

   Medium·CVSS 5.3 EPSS 0.32%

   @marp-team/marp-core is the core for Marp, which is the ecosystem to write your presentation with plain Markdown. Marp Core from v3.0.2 to v3.9.0 and v4.0.0, are vulnerable to cross-site scripting (XSS) due to improper neutralization of HTML sanitization. Marp Core v3.9.1 and v4....

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.