Markdown-it - modern pluggable markdown parser.
89%
Total Score
100
100
100
95
50
| Title | Versions | Severity |
|---|---|---|
CVE-2026-2327 markdown-it is vulnerable to Inefficient Regular Expression Complexity in versions 13.0.0 - 14.1.1. | 13.0.0 - 14.1.1 | Medium |
AIKIDO-2024-10035 markdown-it is vulnerable to Regular Expression Denial of Service (ReDoS) in versions 2.0.0 - 12.3.1. | 2.0.0 - 12.3.1 | Medium |
AIKIDO-2024-10036 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. markdown-it is vulnerable to Cross-site Scripting (XSS) in versions 4.0.0 - 4.3.0. | 4.0.0 - 4.3.0 | Medium |
AIKIDO-2024-10034 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. markdown-it is vulnerable to Infinite Loop in versions 13.0.0 - 13.0.1. | 13.0.0 - 13.0.1 | High |
CVE-2015-10005 markdown-it is vulnerable to Inefficient Regular Expression Complexity in versions 0.0.0 - 3.0.0. | 0.0.0 - 3.0.0 | High |
| Dependency | Last Release | Score |
|---|---|---|
mdurl Version ^2.0.0 | — | — |
argparse Version ^2.0.1 | — | — |
entities Version ^4.4.0 | — | — |
uc.micro Version ^2.1.0 | — | — |
linkify-it Version ^5.0.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

SOC 2Compliant
ISO 27001Compliant