Skip to content
OpenAdvisories

Package · Debian

node-markdown-it

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-48988

    markdown-it: Quadratic complexity DoS in smartquotes rule via replaceAt string operations

    markdown-it is a Markdown parser. Versions 14.1.1 and below contain a denial-of-service vulnerability when typographer: true is enabled, due to quadratic (O(n^2)) processing in the smartquotes rule. The issue stems from repeatedly modifying strings with repla…

    markdown-it markdown-it node-markdown-it markdown-it Debian Ubuntu npm
  • Medium 6.9
    CVE-2025-7969

    Markdown-it 14.1.0 - Cross-site scripting (XSS)

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in markdown-it allows Cross-Site Scripting (XSS). This vulnerability is associated with program files lib/renderer.mjs. This issue affects markdown-it: 1…

    markdown-it markdown-it node-markdown-it node-markdown-it Debian Ubuntu
  • Medium 5.3
    CVE-2022-21670

    Uncontrolled Resource Consumption in markdown-it

    markdown-it is a Markdown parser. Prior to version 1.3.2, special patterns with length greater than 50 thousand characterss could slow down the parser significantly. Users should upgrade to version 12.3.2 to receive a patch. There are no known workarounds asi…

    markdown-it markdown-it node-markdown-it markdown-it Debian Ubuntu npm