Security Advisory

CVE-2026-2327

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-02-12 05:00:07

Last updated 2026-02-12 14:41:53

Assigner snyk

State PUBLISHED

Description

Versions of the package markdown-it from 13.0.0 and before 14.1.1 are vulnerable to Regular Expression Denial of Service (ReDoS) due to the use of the regex /*+$/ in the linkify function. An attacker can supply a long sequence of * characters followed by a non-matching character, which triggers excessive backtracking and may lead to a denial-of-service condition.

← Browse all CVEs View on cve.org ↗