MA
Product
marko
by marko-js · last CVE May 8, 2026
1
CVEs
0
On KEV
6.4
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 1Low 0
Watch

Add marko to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-41591
6.4
0%
May 8
Marko: XSS via case-insensitive script/style closing tag bypass in runtime HTML escaping
Affected: marko < 5.38.36; @marko/runtime-tags < 6.0.164
Showing 1