131 matches found
CLSA-2026-1791290211 TuxCare security update for linkify-it (1 CVE)
TuxCare rebuilt linkify-it to address 1 CVE. Fixed in 2.2.0-tuxcare.2...
PT-2026-115960
TuxCare rebuilt linkify-it to address 1 CVE. Fixed in 2.2.0-tuxcare.2...
Security Bulletin: Vulnerability in markdown-it package bundled with IBM Fusion, IBM Fusion HCI, IBM Fusion Data Cataloging and IBM Fusion Content-Aware Storage.
Summary IBM Fusion, IBM Fusion HCI, IBM Fusion Data Cataloging, and IBM Fusion Content-Aware Storage include the markdown-it library, which is affected by a denial of service vulnerability. CVE-2026-2327. Vulnerability Details CVEID:CVE-2026-2327 DESCRIPTION: Versions of the package markdown-it...
Security Bulletin: Vulnerability in linkify-it bundled with IBM Fusion, IBM Fusion HCI, and IBM Fusion Data Cataloging.
Summary IBM Fusion, IBM Fusion HCI, and IBM Fusion Data Cataloging include the linkify-it library, which is affected by a denial of service vulnerability. CVE-2026-59887, CVE-2026-48801. Vulnerability Details CVEID:CVE-2026-59887 DESCRIPTION: linkify-it is a links recognition library with full...
markdown-it linkify: true has two quadratic paths, so a few hundred KB of markdown blocks the event loop for tens of seconds
Summary Two independent quadratic paths in the linkify: true handling. Both are in markdown-it's own code rather than in linkify-it, which stays linear on both payloads. src/rulescore/linkify.ts calls arrayReplaceAt once per linkified text token, and that rebuilds the whole children array each...
NPM: markdown-it linkify: true has two quadratic paths, so a few hundred KB of markdown blocks the event loop for tens of seconds
NPM: markdown-it linkify: true has two quadratic paths, so a few hundred KB of markdown blocks the event loop for tens of seconds vulnerability discovered by ? in WordPress Npm markdown-it versions 14.3.1...
GHSA-253C-MCHW-3W2R markdown-it linkify: true has two quadratic paths, so a few hundred KB of markdown blocks the event loop for tens of seconds
Summary Two independent quadratic paths in the linkify: true handling. Both are in markdown-it's own code rather than in linkify-it, which stays linear on both payloads. src/rulescore/linkify.ts calls arrayReplaceAt once per linkified text token, and that rebuilds the whole children array each...
Inefficient Algorithmic Complexity
Overview markdown-it is a modern pluggable markdown parser. Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity in the linkify rule src/rulescore/linkify.ts via input containing multiple fuzzy links. The arrayReplaceAt utility was called repeatedly inside the...
CLSA-2026-1790520316 TuxCare security update for linkify-it (1 CVE)
TuxCare rebuilt linkify-it to address 1 CVE. Fixed in 2.2.0-tuxcare.1...
PT-2026-107634
TuxCare rebuilt linkify-it to address 1 CVE. Fixed in 2.2.0-tuxcare.1...
Security Bulletin: Multiple Vulnerabilities in watsonx.data
Summary Multiple vulnerabilities were addressed in watsonx.data 2.4.0 patch 5 version, which was present in different version from watson.data 2.4.0 Vulnerability Details CVEID:CVE-2026-41115 DESCRIPTION: An improper authorization vulnerability has been identified in Apache Kafka. The...
ROOT-APP-NPM-CVE-2026-59887 CVE-2026-59887 in linkify-it - Patched by Root
Root has patched CVE-2026-59887 in the linkify-it package for Root:npm. Multiple fixed versions available...
MGASA-2026-0377 Updated python-linkify-it-py package fixes security vulnerabilities
LinkifyIt.match was quadratic on untrusted input when linkify is enabled GHSA-8m2q-wq3r-6hq8. Fix quadratic complexity in LinkifyIt.match, port of linkify-it 5.0.1 and 5.0.2 upstream CVE-2026-48801, CVE-2026-59887 82 Match validators at a position instead of slicing the tail, needed because Pytho...
Updated python-linkify-it-py package fixes security vulnerabilities
LinkifyIt.match was quadratic on untrusted input when linkify is enabled GHSA-8m2q-wq3r-6hq8. Fix quadratic complexity in LinkifyIt.match, port of linkify-it 5.0.1 and 5.0.2 upstream CVE-2026-48801, CVE-2026-59887 82 Match validators at a position instead of slicing the tail, needed because Pytho...
DoS (Denial of Service) linkify-it Dependency in Jira Service Management Data Center
This High severity DoS Denial of Service vulnerability was introduced in versions 11.1.0, 11.2.0, and 11.3.0 of Jira Service Management Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 8.7 and a CVSS Vector of...
DoS (Denial of Service) linkify-it Dependency in Jira Service Management Data Center
This High severity DoS Denial of Service vulnerability was introduced in versions 11.1.0, 11.2.0, and 11.3.0 of Jira Service Management Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H allows an...
[SECURITY] Fedora 44 Update: python-linkify-it-py-2.1.1-1.fc44
This is a Python port of linkify-it 1, a link recognition library with FULL unicode support. It is focused on high quality link pattern detection in plain text. See a JavaScript demo 2. References: 1 https://github.com/markdown-it/linkify-it 2 https://markdown-it.github.io/linkify-it/...
Fedora 44 : python-linkify-it-py (2026-7c23b06d74)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-7c23b06d74 advisory. Security release: LinkifyIt.match was quadratic on untrusted input when linkify is enabled GHSA-8m2q-wq3r-6hq8. - Fix quadratic complexity in...
ROOT-APP-NPM-CVE-2026-48801 CVE-2026-48801 in linkify-it - Patched by Root
Root has patched CVE-2026-48801 in the linkify-it package for Root:npm. Multiple fixed versions available...
linkify-it: linkify-it: Denial of Service via algorithmic complexity vulnerability
A flaw was found in linkify-it, a library for recognizing links with full Unicode support. The LinkifyIt.prototype.match function, the package's primary public API, has an algorithmic complexity of ON² for inputs containing many fuzzy links or emails. This can be exploited by a remote attacker...