Skip to content
OpenAdvisories

Package · npm

markdown

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low —
    GHSA-wx77-rp39-c6vg

    Regular Expression Denial of Service in markdown

    All versions of `markdown` are vulnerable to Regular Expression Denial of Service (ReDoS). The `markdown.toHTML()` function has significantly degraded performance when parsing long strings containing underscores. This may lead to Denial of Service if the pars…

    markdown npm