{"action":"Upgrade markdown-it to 14.1.1 or later.","affected":[{"fixed":"14.1.1","introduced":"13.0.0"}],"component":"markdown-it","cve_ids":["CVE-2026-2327"],"ecosystem":"npm","epss":0.00739,"exploited":false,"fixed_versions":["14.1.1"],"ghsa_id":"GHSA-38c4-r59v-3vqw","id":"tcs_01M5KEWJR78B2QA3AEH4BE7F81","modified_at":"2026-09-10T03:50:33.896962866Z","published_at":"2026-02-12T06:30:13Z","references":["https://osv.dev/vulnerability/GHSA-38c4-r59v-3vqw","https://nvd.nist.gov/vuln/detail/CVE-2026-2327","https://github.com/markdown-it/markdown-it/commit/4b4bbcae5e0990a5b172378e507b33a59012ed26","https://gist.github.com/ltduc147/c9abecae1b291ede4f692f2ab988c917","https://github.com/markdown-it/markdown-it","https://github.com/markdown-it/markdown-it/blob/14.1.0/lib/rules_inline/linkify.mjs#L33","https://security.snyk.io/vuln/SNYK-JS-MARKDOWNIT-10666750"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-38c4-r59v-3vqw","url":"https://osv.dev/vulnerability/GHSA-38c4-r59v-3vqw"}],"summary":"markdown-it is has a Regular Expression Denial of Service (ReDoS)"}