CVE-2026-111759

🗓️ 19 Oct 2026 17:39:10Reported by GitHub_MType

Quadratic complexity in markdown-it smartquotes with unmatched closing quotes causes DoS.

Reporter	Title	Published	Views	Family All 77
Chainguard	CVE-2026-111759 vulnerabilities	21 Oct 202614:55	–	cgr
Circl	CVE-2026-111759	19 Oct 202617:47	–	circl
CNNVD	markdown-it resource management error vulnerability	18 Oct 202616:00	–	cnnvd
Cvelist	CVE-2026-111759 markdown-it: Quadratic complexity in smartquotes with unmatched closing quotes	19 Oct 202617:39	–	cvelist
Debian CVE	CVE-2026-111759	19 Oct 202617:39	–	debiancve
EUVD	EUVD-2026-104538	20 Oct 202614:34	–	euvd
Github Security Blog	markdown-it: Quadratic complexity in smartquotes with unmatched closing quotes	20 Oct 202614:34	–	github
Mend	CVE-2026-111759	19 Oct 202617:39	–	mend
NVD	CVE-2026-111759	19 Oct 202618:17	–	nvd
osv_cga	CGA-2MC5-RMGG-H4V4	21 Oct 202600:16	–	osv_cga

Vulners

Node

markdown-it_project markdown-itRange15.0.0–15.0.2

markdown-it_project markdown-itRange<14.3.2

[
  {
    "vendor": "markdown-it",
    "product": "markdown-it",
    "versions": [
      {
        "version": ">= 15.0.0, < 15.0.2",
        "status": "affected"
      },
      {
        "version": "< 14.3.2",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/markdown-it/markdown-it/releases/tag/14.3.2
github	www.github.com/markdown-it/markdown-it/commit/cf27366035edf9196667110c47d9d67b030a4152
github	www.github.com/markdown-it/markdown-it/commit/daf5a3c32303e5d9de01b12eeb725fb5990b8162
github	www.github.com/markdown-it/markdown-it/commit/1b379c1b6d0522421bd1a51b77337c79af2c8670
github	www.github.com/markdown-it/markdown-it/releases/tag/15.0.2
github	www.github.com/markdown-it/markdown-it/security/advisories/GHSA-r7fv-28h4-cvq7

19 Oct 2026 21:13Current

6Medium risk

Vulners AI Score6

CVSS 3.17.5

EPSS0.00591

SSVC