Generates 2 moderate severity vulnerabilities

[3dotline]

Please update "markdown-it". See GHSA-6vfc-qv3f-vr6c

[mthahzan]

Any updates on this?

[david-gettins]

PR #204 has been open for a while. If like myself you would like a temporary workaround for the audit issues you can use force-resolutions to force the fixed version of markdown-it. Just beware there may be compatibility issues.

[3dotline]

PR #204 has been open for a while. If like myself you would like a temporary workaround for the audit issues you can use force-resolutions to force the fixed version of markdown-it. Just beware there may be compatibility issues.

Thanks for your suggestion, but I’ve found that using the overrides field in package.json is a cleaner approach than force-resolutions:

"overrides": {
  "react-native-markdown-display": {
    "markdown-it": "^14.0.0",
    "@types/markdown-it": "^14.0.1"
  }
}