145 matches found
CLSA-2026-1793146498 TuxCare security update for linkify-react (1 CVE)
TuxCare rebuilt linkify-react to address 1 CVE. Fixed in 4.1.3-tuxcare.1...
CLSA-2026-1793007594 TuxCare security update for linkify-plugin-mention (1 CVE)
TuxCare rebuilt linkify-plugin-mention to address 1 CVE. Fixed in 4.1.3-tuxcare.1...
CLSA-2026-1792864663 TuxCare security update for linkify-string (1 CVE)
TuxCare rebuilt linkify-string to address 1 CVE. Fixed in 4.1.3-tuxcare.1...
CLSA-2026-1792776237 TuxCare security update for linkify-it (1 CVE)
TuxCare rebuilt linkify-it to address 1 CVE. Fixed in 3.0.3-tuxcare.2...
CLSA-2026-1792767578 TuxCare security update for linkify-it (1 CVE)
TuxCare rebuilt linkify-it to address 1 CVE. Fixed in 1.0.1-tuxcare.2...
CLSA-2026-1792489445 TuxCare security update for linkify-it (1 CVE)
TuxCare rebuilt linkify-it to address 1 CVE. Fixed in 3.0.3-tuxcare.1...
CLSA-2026-1792489196 TuxCare security update for linkify-it (1 CVE)
TuxCare rebuilt linkify-it to address 1 CVE. Fixed in 1.0.1-tuxcare.1...
ROOT-APP-NPM-CVE-2026-48801 CVE-2026-48801 in linkify-it - Patched by Root
Root has patched CVE-2026-48801 in the linkify-it package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-59887 CVE-2026-59887 in linkify-it - Patched by Root
Root has patched CVE-2026-59887 in the linkify-it package for Root:npm. Multiple fixed versions available...
PT-2026-132929
Security vulnerability affects the renovate package. linkify-it is a links recognition library with full Unicode support...
CLSA-2026-1791290211 TuxCare security update for linkify-it (1 CVE)
TuxCare rebuilt linkify-it to address 1 CVE. Fixed in 2.2.0-tuxcare.2...
PT-2026-115960
TuxCare rebuilt linkify-it to address 1 CVE. Fixed in 2.2.0-tuxcare.2...
Security Bulletin: Vulnerability in markdown-it package bundled with IBM Fusion, IBM Fusion HCI, IBM Fusion Data Cataloging and IBM Fusion Content-Aware Storage.
Summary IBM Fusion, IBM Fusion HCI, IBM Fusion Data Cataloging, and IBM Fusion Content-Aware Storage include the markdown-it library, which is affected by a denial of service vulnerability. CVE-2026-2327. Vulnerability Details CVEID:CVE-2026-2327 DESCRIPTION: Versions of the package markdown-it...
Security Bulletin: Vulnerability in linkify-it bundled with IBM Fusion, IBM Fusion HCI, and IBM Fusion Data Cataloging.
Summary IBM Fusion, IBM Fusion HCI, and IBM Fusion Data Cataloging include the linkify-it library, which is affected by a denial of service vulnerability. CVE-2026-59887, CVE-2026-48801. Vulnerability Details CVEID:CVE-2026-59887 DESCRIPTION: linkify-it is a links recognition library with full...
SUSE CVE-2026-48801
linkify-it is a links recognition library with full Unicode support. Prior to 5.0.1, LinkifyIt.prototype.match, the package's primary public API, has ON^2 algorithmic complexity for inputs containing many fuzzy links or emails because the JavaScript-level scan loop re-slices input and re-runs...
Inefficient Algorithmic Complexity
Overview org.webjars.npm:markdown-it is a modern pluggable markdown parser. Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity in the linkify rule src/rulescore/linkify.ts via input containing multiple fuzzy links. The arrayReplaceAt utility was called repeated...
Inefficient Algorithmic Complexity
Overview markdown-it is a modern pluggable markdown parser. Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity in the linkify rule src/rulescore/linkify.ts via input containing multiple fuzzy links. The arrayReplaceAt utility was called repeatedly inside the...
NPM: markdown-it linkify: true has two quadratic paths, so a few hundred KB of markdown blocks the event loop for tens of seconds
NPM: markdown-it linkify: true has two quadratic paths, so a few hundred KB of markdown blocks the event loop for tens of seconds vulnerability discovered by ? in WordPress Npm markdown-it versions 14.3.1...
markdown-it linkify: true has two quadratic paths, so a few hundred KB of markdown blocks the event loop for tens of seconds
Summary Two independent quadratic paths in the linkify: true handling. Both are in markdown-it's own code rather than in linkify-it, which stays linear on both payloads. src/rulescore/linkify.ts calls arrayReplaceAt once per linkified text token, and that rebuilds the whole children array each...
GHSA-253C-MCHW-3W2R markdown-it linkify: true has two quadratic paths, so a few hundred KB of markdown blocks the event loop for tens of seconds
Summary Two independent quadratic paths in the linkify: true handling. Both are in markdown-it's own code rather than in linkify-it, which stays linear on both payloads. src/rulescore/linkify.ts calls arrayReplaceAt once per linkified text token, and that rebuilds the whole children array each...