CVE-2026-48988
1 advisory.
npm/markdown-it CVE-2026-48988: medium 5.3
markdown-it: Quadratic complexity DoS in smartquotes rule via replaceAt string operations
Action: Upgrade markdown-it to 14.2.0 or later.
npm i markdown-it@14.2.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 14.2.0 | - |
Fixed versions
| 14.2.0 |
Sources
- osv: GHSA-6v5v-wf23-fmfq
- https://github.com/markdown-it/markdown-it/security/advisories/GHSA-6v5v-wf23-fmfq
- https://github.com/markdown-it/markdown-it
CVE-2026-48988 · published · modified · JSON