MA
Product
markdown-it
5
CVEs
0
On KEV
7.5
Max CVSS
3
New 30D
Severity mix
Critical 0High 2Medium 2Low 1
Watch
Add markdown-it to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-111758 | 7.5 | Oct 20 | markdown-it: Quadratic-time rendering of a single multi-line link reference definition with default options (regression since 14.0) Affected: >= 14.1.0, < 14.3.3; >= 15.0.0, < 15.0.3 |
| CVE-2026-111759 | 7.5 | Oct 19 | markdown-it: Quadratic complexity in smartquotes with unmatched closing quotes Affected: >= 15.0.0, < 15.0.2; < 14.3.2 |
| CVE-2025-7969 | 6.1 | Aug 21 | Markdown-it 14.1.0 - Cross-site scripting (XSS) Affected: 14.1.0 |
| CVE-2026-48988 | 5.3 | Jun 17 | markdown-it: Quadratic complexity DoS in smartquotes rule via replaceAt string operations Affected: < 14.2.0 |
| CVE-2026-111766 | 3.7 | Oct 19 | markdown-it: Quadratic-time denial of service in inline HTML parsing with html enabled Affected: >= 15.0.0, < 15.0.3; < 14.3.3 |
Showing 5