MA
Vendor
markdown-it
7
CVEs
0
On KEV
3
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-111758 | MA markdown-it markdown-it | 7.5 | Oct 20 | markdown-it: Quadratic-time rendering of a single multi-line link reference definition with default options (regression since 14.0) |
| CVE-2026-111766 | MA markdown-it markdown-it | 3.7 | Oct 19 | markdown-it: Quadratic-time denial of service in inline HTML parsing with html enabled |
| CVE-2026-111759 | MA markdown-it markdown-it | 7.5 | Oct 19 | markdown-it: Quadratic complexity in smartquotes with unmatched closing quotes |
| CVE-2026-48801 | LI linkify-it markdown-it | 7.5 | Jul 14 | linkify-it: Quadratic algorithmic complexity in LinkifyIt#match scan loop |
| CVE-2026-59887 | LI linkify-it markdown-it | 7.5 | Jul 8 | linkify-it: Quadratic-complexity DoS via the `mailto:` validator scan-loop on attacker text |
| CVE-2026-48988 | MA markdown-it markdown-it | 5.3 | Jun 17 | markdown-it: Quadratic complexity DoS in smartquotes rule via replaceAt string operations |
| CVE-2025-7969 | MA markdown-it markdown-it | 6.1 | Aug 21 | Markdown-it 14.1.0 - Cross-site scripting (XSS) |