Tag

marked-npm

Safeguard articles tagged "marked-npm" — guides, analysis, and best practices for software supply chain and application security.

1 article

Open Source

marked on npm: Security Review and Safe Usage

marked is a fast Markdown parser, but it does not sanitize output and older versions carried a ReDoS bug. Here is how to use marked npm without opening an XSS hole.

Feb 11, 20255 min read