306 matches found
ROOT-APP-NPM-CVE-2022-21670 CVE-2022-21670 in markdown-it - Patched by Root
Root has patched CVE-2022-21670 in the markdown-it package for Root:npm. Multiple fixed versions available...
PT-2026-105937
Root has patched AIKIDO-2026-549894 in the markdown-it package for Root:npm. Multiple fixed versions available...
CLSA-2026-1789374715 TuxCare security update for markdown-it (1 CVE)
TuxCare rebuilt markdown-it to address 1 CVE. Fixed in 4.4.0-tuxcare.1...
PT-2026-97763
TuxCare rebuilt markdown-it to address 1 CVE. Fixed in 4.4.0-tuxcare.1...
CVE-2026-48988
A flaw was found in markdown-it, a Markdown parser. A remote attacker could exploit this vulnerability to cause a Denial of Service DoS when the typographer option is enabled. This occurs due to inefficient processing of smartquotes, leading to excessive CPU consumption when parsing specially...
CLSA-2026-1787916789 TuxCare security update for markdown-it (1 CVE)
TuxCare rebuilt markdown-it to address 1 CVE. Fixed in 4.3.0-tuxcare.3...
PT-2026-97245
TuxCare rebuilt markdown-it to address 1 CVE. Fixed in 4.3.0-tuxcare.3...
CVE-2026-54743
Lemmy is a link aggregator and forum for the fediverse. Prior to lemmy-ui 0.19.19-beta.1, LemmyNet/lemmy-ui renders Markdown in src/shared/markdown.ts for post bodies, comment bodies, private messages, and community and site sidebars through mdToHtml, which returns a raw html object that Inferno...
CVE-2026-54743
Lemmy (a fediverse link aggregator and forum) is affected by a stored XSS in lemmy-ui prior to version 0.19.19-beta.1 . The root cause lies in src/shared/markdown.ts, where mdToHtml returns a raw __html object injected by Inferno without a sanitizer pass. The [email protected] plugin,...
CVE-2026-54743 Lemmy: Stored XSS via markdown image alt-text in lemmy-ui html5-embed
Lemmy is a link aggregator and forum for the fediverse. Prior to lemmy-ui 0.19.19-beta.1, LemmyNet/lemmy-ui renders Markdown in src/shared/markdown.ts for post bodies, comment bodies, private messages, and community and site sidebars through mdToHtml, which returns a raw html object that Inferno...
CVE-2026-54743 Lemmy: Stored XSS via markdown image alt-text in lemmy-ui html5-embed
Lemmy is a link aggregator and forum for the fediverse. Prior to lemmy-ui 0.19.19-beta.1, LemmyNet/lemmy-ui renders Markdown in src/shared/markdown.ts for post bodies, comment bodies, private messages, and community and site sidebars through mdToHtml, which returns a raw html object that Inferno...
CVE-2026-54743: Improper Neutralization of Input During Web Page Generation
Lemmy is a link aggregator and forum for the fediverse. Prior to lemmy-ui 0.19.19-beta.1, LemmyNet/lemmy-ui renders Markdown in src/shared/markdown.ts for post bodies, comment bodies, private messages, and community and site sidebars through mdToHtml, which returns a raw html object that Inferno...
CLSA-2026-1774225206 TuxCare security update for markdown-it (2 CVEs)
TuxCare rebuilt markdown-it to address 2 CVEs. Fixed in 8.4.2-tuxcare.1...
CLSA-2026-1774225205 TuxCare security update for markdown-it (1 CVE)
TuxCare rebuilt markdown-it to address 1 CVE. Fixed in 13.0.2-tuxcare.1...
CLSA-2026-1773620215 TuxCare security update for markdown-it (1 CVE)
TuxCare rebuilt markdown-it to address 1 CVE. Fixed in 4.0.3-tuxcare.1...
CLSA-2026-1773015255 TuxCare security update for markdown-it (1 CVE)
TuxCare rebuilt markdown-it to address 1 CVE. Fixed in 4.3.0-tuxcare.1...
PT-2026-74081
TuxCare rebuilt markdown-it to address 2 CVEs. Fixed in 8.4.2-tuxcare.1...
PT-2026-73986
TuxCare rebuilt markdown-it to address 1 CVE. Fixed in 4.0.3-tuxcare.1...