Markdown It Project

3 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2026-2327 Feb 12, 06:16 npm MEDIUM PATCH This Month

Markdown-It versions up to 14.1.1 is affected by inefficient regular expression complexity (redos) (CVSS 5.3).

Denial Of Service Red Hat Markdown It Suse Markdown It Project

NVD GitHub

CVSS 3.1

5.3

EPSS

0.0%

CVE-2025-7969 Aug 21, 17:15 MEDIUM POC This Month

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in markdown-it allows Cross-Site Scripting (XSS). Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XSS Red Hat Markdown It Suse Markdown It Project

NVD GitHub

CVSS 4.0

6.9

EPSS

0.0%

CVE-2015-3295 Jun 07, 21:29 MEDIUM PATCH This Month

markdown-it before 4.1.0 does not block data: URLs. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Markdown It Markdown It Project

NVD GitHub

CVSS 3.0

5.3

EPSS

0.6%

CVE-2026-2327 npm

EPSS 0% CVSS 5.3

MEDIUM PATCH This Month

Markdown-It versions up to 14.1.1 is affected by inefficient regular expression complexity (redos) (CVSS 5.3).

Denial Of Service Red Hat Markdown It +2

NVD GitHub

CVE-2025-7969

EPSS 0% CVSS 6.9

MEDIUM POC This Month

XSS Red Hat Markdown It +2

NVD GitHub

CVE-2015-3295

EPSS 1% CVSS 5.3

MEDIUM PATCH This Month

markdown-it before 4.1.0 does not block data: URLs. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Markdown It Markdown It Project

NVD GitHub