Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Packages
marko
marko vulnerabilities (npm)
1 vulnerability.
marko
npm
Marko: XSS via case-insensitive script/style closing tag bypass in runtime HTML escaping
CVE-2026-41591
Fix available
6.4
Medium
April 22, 2026
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open