TI-2026-30143 CVE-2026-41591 · GHSA-x9fj-57fh-c8wq
Marko: XSS via case-insensitive script/style closing tag bypass in runtime HTML escaping
Priority MEDIUM 62
Marko is a declarative, HTML-based language for building web apps.
No fast-uri vulnerabilities are listed in CISA KEV.
1 record in Marko · all components
Marko is a declarative, HTML-based language for building web apps.