MA
Product
markdown-it
by markdown-it · last CVE Oct 20, 2026
5
CVEs
0
On KEV
7.5
Max CVSS
3
New 30D
Severity mix
Critical 0High 2Medium 2Low 1
Watch

Add markdown-it to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-7969
6.1
0%
Aug 21
Markdown-it 14.1.0 - Cross-site scripting (XSS)
Affected: 14.1.0
CVE-2026-48988
5.3
0%
Jun 17
markdown-it: Quadratic complexity DoS in smartquotes rule via replaceAt string operations
Affected: < 14.2.0
Showing 2