diff --git a/apps/openant-cli/internal/server/server.go b/apps/openant-cli/internal/server/server.go
index d089d812..858533ee 100644
--- a/apps/openant-cli/internal/server/server.go
+++ b/apps/openant-cli/internal/server/server.go
@@ -703,7 +703,7 @@ func sameOriginOK(r *http.Request) bool {
 func (s *Server) handleAsset(w http.ResponseWriter, r *http.Request) {
 	name := r.PathValue("name")
 	switch name {
-	case "marked-18.0.13.min.js", "dompurify-3.4.15.min.js":
+	case "marked-18.0.14.min.js", "dompurify-3.4.15.min.js":
 	default:
 		http.NotFound(w, r)
 		return
diff --git a/apps/openant-cli/ui/disclosure.html b/apps/openant-cli/ui/disclosure.html
index 637b6958..24c1cb89 100644
--- a/apps/openant-cli/ui/disclosure.html
+++ b/apps/openant-cli/ui/disclosure.html
@@ -51,7 +51,7 @@
     <span style="color:#888;font-size:0.9rem">Loading…</span>
   </div>
 </div>
-<script src="/assets/marked-18.0.13.min.js"></script>
+<script src="/assets/marked-18.0.14.min.js"></script>
 <script src="/assets/dompurify-3.4.15.min.js"></script>
 <script nonce="{{.Nonce}}">
 // Strict INERT allowlist for markdown rendered from an untrusted scanned repo.
diff --git a/apps/openant-cli/ui/embed.go b/apps/openant-cli/ui/embed.go
index 7ffede87..d3212554 100644
--- a/apps/openant-cli/ui/embed.go
+++ b/apps/openant-cli/ui/embed.go
@@ -3,5 +3,5 @@ package ui
 
 import "embed"
 
-//go:embed index.html scan.html summary.html disclosure.html vendor/marked-18.0.13.min.js vendor/dompurify-3.4.15.min.js
+//go:embed index.html scan.html summary.html disclosure.html vendor/marked-18.0.14.min.js vendor/dompurify-3.4.15.min.js
 var FS embed.FS
diff --git a/apps/openant-cli/ui/summary.html b/apps/openant-cli/ui/summary.html
index 916c85d6..27e4e323 100644
--- a/apps/openant-cli/ui/summary.html
+++ b/apps/openant-cli/ui/summary.html
@@ -46,7 +46,7 @@
     <span id="loading">Loading summary…</span>
   </div>
 </div>
-<script src="/assets/marked-18.0.13.min.js"></script>
+<script src="/assets/marked-18.0.14.min.js"></script>
 <script src="/assets/dompurify-3.4.15.min.js"></script>
 <script nonce="{{.Nonce}}">
 // Strict INERT allowlist for markdown rendered from an untrusted scanned repo
diff --git a/apps/openant-cli/ui/vendor_test.go b/apps/openant-cli/ui/vendor_test.go
index efcc0f16..641c4404 100644
--- a/apps/openant-cli/ui/vendor_test.go
+++ b/apps/openant-cli/ui/vendor_test.go
@@ -41,7 +41,7 @@ var uiVendorScripts = []struct {
 	sha256 string
 	banner string
 }{
-	{"marked-18.0.13.min.js", "b147274a9ce27d17276587167e49483d719f6893eeca3a3667a59797661d3556", "marked v"},
+	{"marked-18.0.14.min.js", "b147274a9ce27d17276587167e49483d719f6893eeca3a3667a59797661d3556", "marked v"},
 	{"dompurify-3.4.15.min.js", "f263b05369e050fa175d4ecb9c9358eb4253602d510297adfb31df48b2f1c4d5", "DOMPurify "},
 }