| Package | Affected versions | Patched versions |
|---|---|---|
| markdown-it | ≤ 12.3.1 | |
| markdown-it | < 12.3.2 | 12.3.2 |
Special patterns with length > 50K chars can slow down parser significantly.
const md = require('markdown-it')();
md.render(`x ${' '.repeat(150000)} x \nx`);
Upgrade to v12.3.2+
No.
Fix + test sample: https://github.com/markdown-it/markdown-it/commit/ffc49ab46b5b751cd2be0aabb146f2ef84986101
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free