MEDIUM5.4
GHSA-hwgp-c653-6684
GitBook allows Cross-site Scripting via a local .md file.
Details
GitBook through 2.6.9 allows Cross-site Scripting via javascript inclusion in a local .md file.
Are you affected?
Enter the version of the package you're using.
Affected packages
npm/gitbook
Introduced in:
0No fixed version published yet for gitbook (npm). Pin to a known-safe version or switch to an alternative.