Skip to content
OpenAdvisories

Package · Ubuntu

node-markdown-it

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 3.7
    CVE-2026-111766

    markdown-it: Quadratic-time denial of service in inline HTML parsing with html enabled

    markdown-it is a Markdown parser. Prior to 14.3.3 and 15.0.3, when the html option or commonmark preset is enabled and the constructs occur inside a paragraph, attacker-controlled Markdown containing repeated unterminated inline HTML comments, processing inst…

    markdown-it markdown-it node-markdown-it markdown-it Debian Ubuntu npm
  • Low 3.5
    CVE-2015-10005

    markdown-it html_re.js redos

    A vulnerability was found in markdown-it up to 2.x. It has been classified as problematic. Affected is an unknown function of the file lib/common/html_re.js. The manipulation leads to inefficient regular expression complexity. Upgrading to version 3.0.0 is ab…

    node-markdown-it markdown-it Ubuntu npm