Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2025-7969

Markdown-it 14.1.0 - Cross-site scripting (XSS)

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in markdown-it allows Cross-Site Scripting (XSS). This vulnerability is associated with program files lib/renderer.mjs. This issue affects markdown-it: 14.1.0. NOTE: the Supplier does not consider this issue to be a vulnerability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

markdown-it markdown-it

Default version status: unaffected

  • 14.1.0affected

References