Mmarkdown-it

Products

Exploited and recent CVEs

• CVE-2026-111758 High 7.5 markdown-it: Quadratic-time rendering of a single multi-line link reference definition with default options (regression since 14.0) 0.5%
• CVE-2026-111766 Low 3.7 markdown-it: Quadratic-time denial of service in inline HTML parsing with html enabled 0.4%
• CVE-2026-111759 High 7.5 markdown-it: Quadratic complexity in smartquotes with unmatched closing quotes 0.6%
• CVE-2026-48801 High 8.7 linkify-it: Quadratic algorithmic complexity in LinkifyIt#match scan loop 0.4%
• CVE-2026-59887 High 7.5 linkify-it: Quadratic-complexity DoS via the `mailto:` validator scan-loop on attacker text 0.5%
• CVE-2026-48988 Medium 5.3 markdown-it: Quadratic complexity DoS in smartquotes rule via replaceAt string operations 0.4%
• CVE-2025-7969 Medium 6.9 Markdown-it 14.1.0 - Cross-site scripting (XSS) 0.3%
• CVE-2022-21670 Medium 5.3 Uncontrolled Resource Consumption in markdown-it 2.4%