markdown-it vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-111758Highmarkdown-it: markdown-it: Quadratic-time rendering of a single multi-line link reference definition with default options (regression since 14.0)CVE-2026-111766Lowmarkdown-it: markdown-it: Quadratic-time denial of service in inline HTML parsing with html enabled CVE-2026-111759Highmarkdown-it: markdown-it: Quadratic complexity in smartquotes with unmatched closing quotes GHSA-253C-MCHW-3W2RMediummarkdown-it: markdown-it linkify: true has two quadratic paths, so a few hundred KB of markdown blocks the event loop for tens of seconds CVE-2026-48988Mediummarkdown-it: markdown-it: Quadratic complexity DoS in smartquotes rule via replaceAt string operations CVE-2026-2327Mediummarkdown-it: markdown-it is has a Regular Expression Denial of Service (ReDoS)CVE-2015-10005Highmarkdown-it: markdown-it vulnerable to Inefficient Regular Expression Complexity CVE-2022-21670Mediummarkdown-it: Uncontrolled Resource Consumption in markdown-it

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo