system
Describe <CVE-2020-28459>.
user
What is <CVE-2020-28459>?
assistant
This affects all versions of package markdown-it-decorate. An attacker can add an event handler or use javascript:xxx for the link..