`markdown-it`

Ecosystem:
npm

Package URL:
pkg:npm/markdown-it

Total PRs:
2,495 Dependabot PRs

Latest PR:
about 4 hours ago

Unique Repositories:
1,764 repositories

Unique Repos (30 days):
240 repositories

Security Advisories

markdown-it: Quadratic complexity DoS in smartquotes rule via replaceAt string operations

GHSA-6v5v-wf23-fmfq CVE-2026-48988 MODERATE published 4 months ago • updated about 3 hours ago

### Summary A quadratic time complexity vulnerability exists in markdown-it's smartquotes rule (enabled via the `typographer: true` option). An at...

markdown-it: Quadratic-time rendering of a single multi-line link reference definition with default options (regression since 14.0)

GHSA-gfr2-rv44-r23c CVE-2026-111758 HIGH published 5 days ago • updated 3 days ago

### Summary A link reference definition whose label or title is never closed is O(n²) in markdown-it 15.0.2 with default options. Continuation lin...

Uncontrolled Resource Consumption in markdown-it

GHSA-6vfc-qv3f-vr6c CVE-2022-21670 MODERATE published almost 5 years ago • updated 7 days ago

### Impact Special patterns with length > 50K chars can slow down parser significantly. ```js const md = require('markdown-it')(); md.render(`x ...

markdown-it vulnerable to Inefficient Regular Expression Complexity

GHSA-j5p7-jf4q-742q CVE-2015-10005 HIGH published almost 4 years ago • updated 8 days ago

A vulnerability was found in markdown-it up to 2.x. It has been classified as problematic. Affected is an unknown function of the file `lib/common/...

markdown-it linkify: true has two quadratic paths, so a few hundred KB of markdown blocks the event loop for tens of seconds

GHSA-253c-mchw-3w2r MODERATE published 27 days ago • updated 15 days ago

## Summary Two independent quadratic paths in the `linkify: true` handling. Both are in markdown-it's own code rather than in linkify-it, which st...

View all 8 advisories

Recent PRs

RSS Feed

build(deps): bump the npm-dependencies group across 1 directory with 25 updates

Champ-Deep/ChamPDF #107

15.0.2 → 15.0.3 Patch PR

Open about 4 hours ago 1 comment

chore(deps): bump markdown-it from 15.0.2 to 15.0.3

XBlueSky/vatt-ghern #219

15.0.2 → 15.0.3 Patch PR

Open about 14 hours ago 2 comments

chore(deps-dev): bump markdown-it from 15.0.2 to 15.0.3 in the npm_and_yarn group across 1 directory

sn109946/translated-content #1

15.0.2 → 15.0.3 Patch PR

Open 1 day ago 1 comment

Build(deps): bump the npm_and_yarn group across 1 directory with 5 updates

CLDMV/slothlet #662

14.3.2 → 14.3.3 Patch PR

Closed 1 day ago 4 comments

Bump markdown-it from 14.3.1 to 14.3.3

microsoft/vscode-pull-request-github #9094

14.3.1 → 14.3.3 Patch PR

Open 2 days ago 1 comment

Bump the dependencies group across 1 directory with 6 updates

fakechris/lumenbox #392

15.0.2 → 15.0.3 Patch PR

Open 2 days ago 1 comment

chore(deps): bump markdown-it from 14.3.2 to 14.3.3

daytona/clients #412

14.3.2 → 14.3.3 Patch PR

Open 2 days ago 1 comment

chore(deps-dev): bump markdown-it from 14.3.2 to 14.3.3

remeda/remeda #1468

14.3.2 → 14.3.3 Patch PR

Open 3 days ago 4 comments

chore(deps): bump markdown-it from 14.3.1 to 14.3.3

skaniti/compendium #14

14.3.1 → 14.3.3 Patch PR

Open 3 days ago 1 comment

chore(deps): bump markdown-it from 14.3.2 to 14.3.3 in the security group across 1 directory

qruto/nuxt-backend #143

14.3.2 → 14.3.3 Patch PR

Open 3 days ago 2 comments

build(deps): bump markdown-it from 14.3.2 to 14.3.3

Keinsleif/sbsp #229

14.3.2 → 14.3.3 Patch PR

Open 3 days ago 1 comment

feat(deps): bump markdown-it from 14.3.2 to 14.3.3

andymai/brepjs #2408

14.3.2 → 14.3.3 Patch PR

Closed 3 days ago 4 comments

chore(vscode): bump markdown-it from 14.3.2 to 14.3.3 in /editors/vscode

Cliftonz/jarvy #154

14.3.2 → 14.3.3 Patch PR

Open 4 days ago 1 comment

build(deps): bump markdown-it from 14.3.2 to 14.3.3 in / csharp/language/abstractions/composition

RLittlesII/talks #56

14.3.2 → 14.3.3 Patch PR

Open 4 days ago 2 comments

Bump markdown-it from 14.3.2 to 14.3.3 in /blocks

cardknox/woocommerce-gateway-cardknox #247

14.3.2 → 14.3.3 Patch PR

Open 4 days ago 1 comment

build(deps-dev): bump markdown-it from 14.3.2 to 14.3.3 in /src/api/js

Z3Prover/z3 #11259

14.3.2 → 14.3.3 Patch PR

Open 4 days ago 1 comment

build(deps-dev): bump markdown-it from 14.3.2 to 14.3.3

encrypit/file64 #1019

14.3.2 → 14.3.3 Patch PR

Closed 4 days ago 2 comments

⬆️ Bump markdown-it from 14.3.2 to 14.3.3 in the npm_and_yarn group across 1 directory

Nick2bad4u/pre-commit-config-nick2bad4u #13

14.3.2 → 14.3.3 Patch PR

Closed 4 days ago 2 comments

⬆️ Bump markdown-it from 14.3.2 to 14.3.3 in the npm_and_yarn group across 1 directory

Nick2bad4u/nick2bad4u-repo-template #13

14.3.2 → 14.3.3 Patch PR

Closed 4 days ago 2 comments

build: bump markdown-it from 14.3.2 to 14.3.3

fb55/entities #2402

14.3.2 → 14.3.3 Patch PR

Closed 4 days ago 2 comments

build(deps-dev): bump markdown-it from 14.3.2 to 14.3.3 in the npm_and_yarn group across 1 directory

PastureStack/web-console #217

14.3.2 → 14.3.3 Patch PR

Closed 4 days ago 1 comment

chore(deps-dev): bump markdown-it from 14.3.1 to 14.3.3

verbotenj/cardano-raw-sdk #17

14.3.1 → 14.3.3 Patch PR

Open 4 days ago 1 comment

chore(deps-dev): bump markdown-it from 14.2.0 to 14.3.3 in /docs-site

padosoft/laravel-iam-client #21

14.2.0 → 14.3.3 Minor PR

Open 4 days ago 1 comment

Bump markdown-it from 14.3.2 to 14.3.3 in /Science-Agent-Pipeline in the npm_and_yarn group across 1 directory

math12345678/caterva #36

14.3.2 → 14.3.3 Patch PR

Open 4 days ago 1 comment

chore(deps): bump markdown-it from 14.3.2 to 14.3.3 in /frontend

Open-Source-Legal/OpenContracts #2460

14.3.2 → 14.3.3 Patch PR

Closed 4 days ago 2 comments

⬆️ Bump markdown-it from 14.3.2 to 14.3.3 in the npm_and_yarn group across 1 directory

Nick2bad4u/Github-Security-CodeScanning-Alerts-Skill #20

14.3.2 → 14.3.3 Patch PR

Closed 4 days ago 2 comments

build(deps-dev): bump markdown-it from 14.3.2 to 14.3.3 in the npm_and_yarn group across 1 directory

StarCitizenTools/mediawiki-skins-Citizen #2082

14.3.2 → 14.3.3 Patch PR

Open 4 days ago 1 comment

chore(deps-dev): bump markdown-it from 14.3.2 to 14.3.3

opensearch-project/OpenSearch-Dashboards #13033

14.3.2 → 14.3.3 Patch PR

Closed 4 days ago 1 comment

build(deps-dev): bump markdown-it from 14.3.2 to 14.3.3

remarkablemark/npm-package-typescript-template #1329

14.3.2 → 14.3.3 Patch PR

Closed 4 days ago 1 comment

chore(deps-dev): bump markdown-it from 14.3.2 to 14.3.3

TautvydasDerzinskas/vscode-html-to-css #76

14.3.2 → 14.3.3 Patch PR

Open 4 days ago 1 comment

Bump markdown-it from 14.3.2 to 14.3.3

microsoft/vscode-react-native #3012

14.3.2 → 14.3.3 Patch PR

Open 4 days ago 3 comments

Bump markdown-it and jsdoc

Exios66/psychojs #9

10.0.0 → 14.3.3 Major PR

Open 4 days ago 1 comment

build(deps-dev): bump markdown-it from 14.2.0 to 14.3.3

whitphx/vscode-emacs-mcx #3076

14.2.0 → 14.3.3 Minor PR

Open 5 days ago 4 comments

chore(deps-dev): Bump markdown-it from 14.3.2 to 14.3.3 in the npm_and_yarn group across 1 directory

SecPal/.github #1240

14.3.2 → 14.3.3 Patch PR

Open 5 days ago 1 comment

chore(deps): bump markdown-it from 14.2.0 to 14.3.3

AmeerulH/scph-website #171

14.2.0 → 14.3.3 Minor PR

Closed 5 days ago 1 comment

build(deps): bump markdown-it and markdownlint-cli

Morin3/tldr #14

14.1.0 → 14.3.3 Minor PR

Open 5 days ago 3 comments

chore(deps): bump markdown-it from 14.1.0 to 14.3.3

a23patrick/CIPP #39

14.1.0 → 14.3.3 Minor PR

Closed 5 days ago 2 comments

chore(deps): bump markdown-it from 14.3.0 to 14.3.3 in /workspaces/extensions

redhat-developer/rhdh-plugins #5308

14.3.0 → 14.3.3 Patch PR

Open 5 days ago 1 comment

chore(deps): bump markdown-it from 14.3.2 to 14.3.3 in /docs/site

hiero-ledger/solo #6255

14.3.2 → 14.3.3 Patch PR

Open 5 days ago 4 comments

chore(deps): bump markdown-it from 14.3.2 to 14.3.3 in /ext/vscode

Azure/azure-dev #10648

14.3.2 → 14.3.3 Patch PR

Open 5 days ago 2 comments

chore(deps-dev): bump markdown-it from 15.0.2 to 15.0.3

Proj-Pigeon/GuEarth #57

15.0.2 → 15.0.3 Patch PR

Open 5 days ago 2 comments

Bump markdown-it from 15.0.2 to 15.0.3 in the npm_and_yarn group across 1 directory

yhay81/sqrail #65

15.0.2 → 15.0.3 Patch PR

Open 5 days ago 1 comment

build(deps-dev): bump markdown-it from 15.0.2 to 15.0.3 in the npm_and_yarn group across 1 directory

sigma7863/translated-content #381

15.0.2 → 15.0.3 Patch PR

Open 5 days ago 2 comments

build(deps): bump markdown-it from 14.3.2 to 14.3.3 in /docs

snagfilms/langchaingo #22

14.3.2 → 14.3.3 Patch PR

Open 5 days ago 1 comment

build(deps): bump markdown-it from 14.1.1 to 14.3.3 in /docs/site

Dustin4444/sui #478

14.1.1 → 14.3.3 Minor PR

Open 5 days ago 8 comments

Bump markdown-it from 15.0.2 to 15.0.3

6529-Collections/6529seize-backend #2229

15.0.2 → 15.0.3 Patch PR

Open 5 days ago 2 comments

chore(deps): bump markdown-it from 14.1.0 to 14.3.3

shufo/vscode-blade-formatter #1083

14.1.0 → 14.3.3 Minor PR

Closed 5 days ago 1 comment

chore(deps): Bump markdown-it from 14.3.2 to 14.3.3

Braveheart-Innovations/debate-ai #303

14.3.2 → 14.3.3 Patch PR

Closed 5 days ago 1 comment

Bump the npm_and_yarn group across 1 directory with 3 updates

github/docs #46394

14.3.2 → 14.3.3 Patch PR

Closed 5 days ago 2 comments

chore(deps): bump markdown-it from 14.3.1 to 14.3.2

endatix/endatix-hub #1165

14.3.1 → 14.3.2 Patch PR

Closed 6 days ago 2 comments

Package Details

Name:	`markdown-it`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/markdown-it`
JSON API:	View JSON

Security Advisories

8

Active advisories

HIGH 3

MODERATE 4

LOW 1

View All npm Advisories

Package Information

Description:

Markdown-it - modern pluggable markdown parser.

Repository:	https://github.com/markdown-it/markdown-it
Homepage:	https://github.com/markdown-it/markdown-it#readme
Latest Release:	`14.1.0` over 2 years ago
Dependent Repos:	205,037
Dependent Packages:	8,475
Downloads:	39,354,029
Ranking:	Top 0.0739% by dependent repos Top 0.0527% by downloads Top 0.0114% by dependent pkgs

PR Status

Open 1,066 (42.7%)

Merged 13 (0.5%)

Closed 1,407 (56.4%)

PR Types

Major 370 (14.8%)

Minor 409 (16.4%)

Patch 1,703 (68.3%)

Removal 3 (0.1%)