# What changed in mdast-util-to-hast

> 2 changes in mdast-util-to-hast 13 from its official release notes, upgrade guides and advisories: 1 security. Each one cited. Sources checked 2026-10-18. HTML: https://unstale.sh/npm/mdast-util-to-hast/

To see which of these apply to a repository, run `npx @unstale/cli init` in it.

## mdast-util-to-hast 13

### Security

- mdast-util-to-hast has unsanitized class attribute (13.2.1) — [security advisory](https://github.com/advisories/GHSA-4FH9-H7WG-Q85M)

### Fixes and other changes

- Fixes support for spaces in class names. (13.2.1) — [release notes](https://github.com/syntax-tree/mdast-util-to-hast/releases/tag/13.2.1)