Skip to content
OpenAdvisories

Package · Debian

node-markdown-it

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.7
    CVE-2026-111766

    markdown-it: Quadratic-time denial of service in inline HTML parsing with html enabled

    markdown-it is a Markdown parser. Prior to 14.3.3 and 15.0.3, when the html option or commonmark preset is enabled and the constructs occur inside a paragraph, attacker-controlled Markdown containing repeated unterminated inline HTML comments, processing inst…

    markdown-it markdown-it node-markdown-it markdown-it Debian Ubuntu npm