MA
Product
markdown-it
by markdown-it · last CVE Oct 20, 2026
5
CVEs
0
On KEV
7.5
Max CVSS
3
New 30D
Severity mix
Critical 0High 2Medium 2Low 1
Watch

Add markdown-it to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-111758
7.5
0%
Oct 20
markdown-it: Quadratic-time rendering of a single multi-line link reference definition with default options (regression since 14.0)
Affected: >= 14.1.0, < 14.3.3; >= 15.0.0, < 15.0.3
CVE-2026-111759
7.5
1%
Oct 19
markdown-it: Quadratic complexity in smartquotes with unmatched closing quotes
Affected: >= 15.0.0, < 15.0.2; < 14.3.2
Showing 2