CVE-2026-111766

A flaw was found in markdown-it. When HTML parsing is enabled, a remote attacker can cause a Denial of Service DoS by supplying specially crafted Markdown input containing repeated unterminated inline HTML constructs. The parser repeatedly scans overlapping input while searching for closing tags,...