Skip to content
OpenAdvisories

Product · SAP

SAPUI5 framework (Markdown-it component)

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.9
    CVE-2025-42873

    Denial of Service (DoS) in SAPUI5 framework (Markdown-it component)

    SAPUI5 (and OpenUI5) packages use outdated 3rd party libraries with known security vulnerabilities. When markdown-it encounters special malformed input, it fails to terminate properly, resulting in an infinite loop. This Denial of Service via infinite loop ca…

    SAP SAPUI5 framework (Markdown-it component)