← Database

CVE-2022-21670

MEDIUM CVSS: 5.3 Published: 2022-01-10 Modified: 2026-06-17

Description

markdown-it is a Markdown parser. Prior to version 1.3.2, special patterns with length greater than 50 thousand characterss could slow down the parser significantly. Users should upgrade to version 12.3.2 to receive a patch. There are no known workarounds aside from upgrading.

Affected Platforms

Markdown-It Project Markdown-It

Weakness Type

CWE-400, CWE-1333

References