Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2022-21670

Uncontrolled Resource Consumption in markdown-it

Description

markdown-it is a Markdown parser. Prior to version 1.3.2, special patterns with length greater than 50 thousand characterss could slow down the parser significantly. Users should upgrade to version 12.3.2 to receive a patch. There are no known workarounds aside from upgrading.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

markdown-it markdown-it

  • < 12.3.2affected

References