Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-gfr2-rv44-r23c
  • npm/markdown-it
 markdown-it: Quadratic-time rendering of a single multi-line link reference... 20 Oct
  • Fix available
  • Severity - 7.5 (High)
GHSA-vfgh-jcmw-g37q
  • npm/markdown-it
 markdown-it: Quadratic-time denial of service in inline HTML parsing with html... 20 Oct
  • Fix available
  • Severity - 3.7 (Low)
GHSA-r7fv-28h4-cvq7
  • npm/markdown-it
 markdown-it: Quadratic complexity in smartquotes with unmatched closing quotes 20 Oct
  • Fix available
  • Severity - 7.5 (High)
GHSA-253c-mchw-3w2r
  • npm/markdown-it
 markdown-it linkify: true has two quadratic paths, so a few hundred KB of markdown blocks the event loop for tens of seconds 29 Sep
  • Fix available
  • Severity - 6.3 (Medium)
GHSA-6v5v-wf23-fmfq
  • npm/markdown-it
 markdown-it: Quadratic complexity DoS in smartquotes rule via replaceAt string operations 15 Jun
  • Fix available
  • Severity - 5.3 (Medium)
GHSA-38c4-r59v-3vqw
  • npm/markdown-it
 markdown-it is has a Regular Expression Denial of Service (ReDoS) 12 Feb
  • Fix available
  • Severity - 5.5 (Medium)
MAL-2025-25938
  • npm/markdown-it-embed
 Malicious code in markdown-it-embed (npm) 14 Aug 2025
  • No fix available
MAL-2024-1257
  • npm/discourse-markdown-it
 Malicious code in discourse-markdown-it (npm) 15 Apr 2024
  • No fix available
GHSA-j5p7-jf4q-742q
  • npm/markdown-it
 markdown-it vulnerable to Inefficient Regular Expression Complexity 27 Dec 2022
  • Fix available
  • Severity - 7.5 (High)
GHSA-wfvx-fx73-3rfj
  • npm/markdown-it-toc
 markdown-it-toc Cross-site Scripting due to title of generated toc and contents of header not being escaped 26 Jul 2022
  • No fix available
  • Severity - 6.1 (Medium)
GHSA-rhf5-2378-3w3w
  • npm/markdown-it-decorate
 markdown-it-decorate vulnerable to cross-site scripting (XSS) 19 Jul 2022
  • No fix available
  • Severity - 6.1 (Medium)
GHSA-f246-xrrj-g8j6
  • npm/markdown-it-highlightjs
 Cross-site Scripting in markdown-it-highlightjs 10 Feb 2022
  • Fix available
  • Severity - 6.1 (Medium)
GHSA-6vfc-qv3f-vr6c
  • npm/markdown-it
 Uncontrolled Resource Consumption in markdown-it 12 Jan 2022
  • Fix available
  • Severity - 5.3 (Medium)
GHSA-5ff8-jcf9-fw62
  • npm/markdown-it-katex
 Cross-Site Scripting in markdown-it-katex 04 Sep 2020
  • No fix available
GHSA-x6m6-5hrf-fh6r
  • npm/markdown-it-toc-and-anchor
 Denial of Service in markdown-it-toc-and-anchor 01 Sep 2020
  • Fix available
  • Severity - 7.5 (High)