Markdown It

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2026-2327 npm MEDIUM PATCH This Month

Markdown-It versions up to 14.1.1 is affected by inefficient regular expression complexity (redos) (CVSS 5.3).

Denial Of Service Markdown It Red Hat Suse

NVD GitHub

CVSS 3.1

5.3

EPSS

0.0%

CVE-2025-7969 MEDIUM POC This Month

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in markdown-it allows Cross-Site Scripting (XSS). Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XSS Markdown It Red Hat Suse

NVD GitHub

CVSS 4.0

6.9

EPSS

0.0%

CVE-2026-2327 npm

EPSS 0% CVSS 5.3

MEDIUM PATCH This Month

Markdown-It versions up to 14.1.1 is affected by inefficient regular expression complexity (redos) (CVSS 5.3).

Denial Of Service Markdown It Red Hat +1

NVD GitHub

CVE-2025-7969

EPSS 0% CVSS 6.9

MEDIUM POC This Month

XSS Markdown It Red Hat +1

NVD GitHub