{"id":"CVE-2015-3295","details":"markdown-it before 4.1.0 does not block data: URLs.","modified":"2026-04-10T03:46:18.890915Z","published":"2017-06-07T21:29:00Z","references":[{"type":"ADVISORY","url":"http://www.openwall.com/lists/oss-security/2015/04/10/10"},{"type":"ADVISORY","url":"http://www.securityfocus.com/bid/71824"},{"type":"ADVISORY","url":"https://github.com/markdown-it/markdown-it/commit/f76d3beb46abd121892a2e2e5c78376354c214e3"},{"type":"ARTICLE","url":"http://www.openwall.com/lists/oss-security/2015/04/10/10"},{"type":"FIX","url":"https://github.com/markdown-it/markdown-it/commit/f76d3beb46abd121892a2e2e5c78376354c214e3"},{"type":"REPORT","url":"https://github.com/markdown-it/markdown-it/commit/f76d3beb46abd121892a2e2e5c78376354c214e3"}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"}]}