Markdown-it - modern pluggable markdown parser.
88%
Total Score
80
100
95
80
50
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-531832 markdown-it is vulnerable to Uncontrolled Resource Consumption in versions 0.0.1 - 14.3.0 and 15.0.0 - 15.0.0. | 0.0.1 - 14.3.015.0.0 - 15.0.0 | Medium |
CVE-2026-48988 markdown-it is vulnerable to Uncontrolled Resource Consumption in versions 0.0.0 - 14.1.1. | 0.0.0 - 14.1.1 | Medium |
CVE-2026-2327 markdown-it is vulnerable to Inefficient Regular Expression Complexity in versions 13.0.0 - 14.1.1. | 13.0.0 - 14.1.1 | Medium |
AIKIDO-2024-10035 markdown-it is vulnerable to Regular Expression Denial of Service (ReDoS) in versions 2.0.0 - 12.3.1. | 2.0.0 - 12.3.1 | Medium |
AIKIDO-2024-10036 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. markdown-it is vulnerable to Cross-site Scripting (XSS) in versions 4.0.0 - 4.3.0. | 4.0.0 - 4.3.0 | Medium |
| Dependency | Last Release | Score |
|---|---|---|
mdurl Version ^2.1.0 | — | — |
argparse Version ^3.0.0 | — | — |
entities Version ^8.0.0 | — | — |
uc.micro Version ^3.0.0 | — | — |
linkify-it Version ^6.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.