Browse all 5 CVE security advisories affecting markdown-it. AI-powered Chinese analysis, POCs, and references for each vulnerability.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-48801 | linkify-it: Quadratic algorithmic complexity in LinkifyIt#match scan loop — linkify-it CWE-1333 | - | - | 2026-07-14 |
| CVE-2026-59887 | linkify-it: Quadratic-complexity DoS via the `mailto:` validator scan-loop on attacker text — linkify-it CWE-407 | 7.5 | High | 2026-07-08 |
| CVE-2026-48988 | markdown-it: Quadratic complexity DoS in smartquotes rule via replaceAt string operations — markdown-it CWE-400 | 5.3 | Medium | 2026-06-17 |
| CVE-2025-7969 | Markdown-it 14.1.0 - Cross-site scripting (XSS) — markdown-it CWE-79 | 6.1 | - | 2025-08-21 |
| CVE-2022-21670 | Uncontrolled Resource Consumption in markdown-it — markdown-it CWE-400 | 5.3 | Medium | 2022-01-10 |
This page lists every published CVE security advisory associated with markdown-it. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.