AIKIDO-2026-10789
@astrojs/markdown-remark is vulnerable to Prototype Pollution
61
Medium Risk
This Affects:
@astrojs/markdown-remarkTL;DR
Nested property walks over structured markdown-related configuration could advance across prototype-shaped keys when resolving headings and related metadata. That lets hostile documents influence lookups beyond plain own-properties and corrupt intended traversal semantics. The patch rejects prototype-like segment names during those nested accesses so traversal stops before inherited or polluted properties participate.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range.
Background info
@astrojs/markdown-remark is vulnerable to Prototype Pollution in versions 0.3.1 - 7.1.0.
How to fix this
Upgrade the @astrojs/markdown-remark library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.