Markdown-IT / Markdown-IT
6 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-48988 | markdown-it: Quadratic complexity DoS in smartquotes rule via replaceAt string operations | MEDIUM | 5.3 | Jun 17, 2026 |
| CVE-2026-2327 | markdown-it: markdown-it: Denial of Service via Regular Expression Denial of Service in linkify function | MEDIUM | 6.9 | Feb 12, 2026 |
| CVE-2025-7969 | Markdown-it 14.1.0 - Cross-site scripting (XSS) | MEDIUM | 6.9 | Aug 21, 2025 |
| CVE-2015-10005 | markdown-it html_re.js redos | HIGH | 7.5 | Dec 27, 2022 |
| CVE-2022-21670 | Uncontrolled Resource Consumption in markdown-it | MEDIUM | 5.3 | Jan 10, 2022 |
| CVE-2015-3295 | markdown-it before 4.1.0 does not block data: URLs. | MEDIUM | 5.3 | Jun 7, 2017 |
Showing 1 to 6 of 6 CVEs