Filtered by vendor Markdown-it Project
Subscribe
Search
Total
2 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2022-21670 | 1 Markdown-it Project | 1 Markdown-it | 2022-01-18 | 5.0 MEDIUM | 5.3 MEDIUM |
| markdown-it is a Markdown parser. Prior to version 1.3.2, special patterns with length greater than 50 thousand characterss could slow down the parser significantly. Users should upgrade to version 12.3.2 to receive a patch. There are no known workarounds aside from upgrading. | |||||
| CVE-2015-3295 | 1 Markdown-it Project | 1 Markdown-it | 2017-06-14 | 5.0 MEDIUM | 5.3 MEDIUM |
| markdown-it before 4.1.0 does not block data: URLs. | |||||