markdown-it
2 known vulnerabilities in markdown-it, with patch priority, exploit likelihood and the news covering them.
Latest vulnerabilities
- CVE-2026-48988 CVSS 5.3 medium markdown-it is a Markdown parser. Versions 14.1.1 and below contain a denial-of-service vulnerability when typographer: true is enabled…
- CVE-2026-2327 CVSS 5.5 medium Versions of the package markdown-it from 13.0.0 and before 14.1.1 are vulnerable to Regular Expression Denial of Service (ReDoS) due to…