Packages

Earmark is a pure-Elixir Markdown converter. It is intended to be used as a library (just call Earmark.as_html), but can also be used as a command-line tool (run mix escript.build first). Output generation is pluggable.

Retired package: Deprecated - Earmark is no longer maintained. Migrate to a replacement, for example MDEx (https://hex.pm/packages/mdex).
Security advisory: This version has known vulnerabilities. View advisories

Current section

1 Advisory

Jump to
EEF-CVE-2026-48591 CVE-2026-48591

Stored XSS via unescaped HTML attribute values in earmark

June 17, 2026
CVSS
?
4.8 / 10.0 Medium
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N

Affected Versions

>= 1.4.1

Checksum

Dependency Config

mix.exs

rebar.config

Gleam

erlang.mk

Package Details

Downloads Last 30 days, all versions
0 5K 10K 15K 20K

this version

37 578

yesterday

11 370

last 7 days

76 418

all time

72 856 479

Last Updated

Jun 02, 2026

License

Apache-2.0

Build Tools

mix

Publisher

lab42 lab42

Links