Skip to content
OpenAdvisories

Package · Debian

node-markdown-it

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-111759

    markdown-it: Quadratic complexity in smartquotes with unmatched closing quotes

    markdown-it is a Markdown parser. Prior to 14.3.2 and 15.0.2, when typographer: true is enabled, specially crafted Markdown can cause quadratic processing time in the smartquotes rule, potentially leading to denial of service in applications processing untrus…

    markdown-it markdown-it node-markdown-it markdown-it Debian Ubuntu npm