{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.16.1"}],"component":"@digitalocean/do-markdownit","cve_ids":["CVE-2025-59717"],"ecosystem":"npm","epss":0.00387,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-2h8j-8r9p-849f","id":"tcs_01M5KET70CASEXRGSPHSRXYVCG","modified_at":"2025-09-22T22:55:37Z","published_at":"2025-09-19T06:31:21Z","references":["https://osv.dev/vulnerability/GHSA-2h8j-8r9p-849f","https://nvd.nist.gov/vuln/detail/CVE-2025-59717","https://gist.github.com/thesmartshadow/dd19665f1f51a4e3c7a766e70c9eafd0","https://github.com/digitalocean/do-markdownit","https://www.npmjs.com/package/@digitalocean/do-markdownit"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-2h8j-8r9p-849f","url":"https://osv.dev/vulnerability/GHSA-2h8j-8r9p-849f"}],"summary":"@digitalocean/do-markdownit has Type Confusion vulnerability"}