marko/runtime-tags vulnerabilities

CVEs whose affected-version data names the marko/runtime-tags package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-41591Medium· 6.4

4mo ago

Marko is a declarative, HTML-based language for building web apps

Marko is a declarative, HTML-based language for building web apps. Prior to marko version 5.38.36 and prior to @marko/runtime-tags 6.0.164, when dynamic text is interpolated into a <script> or <style> tag the Marko runtime failed to prev…

▾ Sunlitopenjsf · markoEPSS 0.23%via NVD