CVE-2026-2327

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-2327
Versions of the package markdown-it from 13.0.0 and before 14.1.1 are vulnerable to Regular Expression Denial of Service (ReDoS) due to the use of the regex /\*+$/ in the linkify function. An attacker can supply a long sequence of * characters followed by a non-matching character, which triggers excessive backtracking and may lead to a denial-of-service condition.

5.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

References
Link Resource
https://gist.github.com/ltduc147/c9abecae1b291ede4f692f2ab988c917 Vendor Advisory
https://github.com/markdown-it/markdown-it/blob/14.1.0/lib/rules_inline/linkify.mjs%23L33 Broken Link
https://github.com/markdown-it/markdown-it/commit/4b4bbcae5e0990a5b172378e507b33a59012ed26 Patch Product
https://security.snyk.io/vuln/SNYK-JS-MARKDOWNIT-10666750 Third Party Advisory
https://gist.github.com/ltduc147/c9abecae1b291ede4f692f2ab988c917 Vendor Advisory
https://security.snyk.io/vuln/SNYK-JS-MARKDOWNIT-10666750 Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:markdown-it_project:markdown-it:*:*:*:*:*:*:*:*
History

23 Feb 2026, 14:08

Type Values Removed Values Added
References () https://gist.github.com/ltduc147/c9abecae1b291ede4f692f2ab988c917 - () https://gist.github.com/ltduc147/c9abecae1b291ede4f692f2ab988c917 - Vendor Advisory
References () https://github.com/markdown-it/markdown-it/blob/14.1.0/lib/rules_inline/linkify.mjs%23L33 - () https://github.com/markdown-it/markdown-it/blob/14.1.0/lib/rules_inline/linkify.mjs%23L33 - Broken Link
References () https://github.com/markdown-it/markdown-it/commit/4b4bbcae5e0990a5b172378e507b33a59012ed26 - () https://github.com/markdown-it/markdown-it/commit/4b4bbcae5e0990a5b172378e507b33a59012ed26 - Patch, Product
References () https://security.snyk.io/vuln/SNYK-JS-MARKDOWNIT-10666750 - () https://security.snyk.io/vuln/SNYK-JS-MARKDOWNIT-10666750 - Third Party Advisory
First Time Markdown-it Project
Markdown-it Project markdown-it
CPE cpe:2.3:a:markdown-it_project:markdown-it:*:*:*:*:*:*:*:*
Summary
  • (es) Versiones del paquete markdown-it desde la 13.0.0 y anteriores a la 14.1.1 son vulnerables a la Denegación de Servicio por Expresiones Regulares (ReDoS) debido al uso de la expresión regular /\*+$/ en la función linkify. Un atacante puede proporcionar una secuencia larga de caracteres * seguida de un carácter no coincidente, lo que desencadena un retroceso excesivo y puede conducir a una condición de denegación de servicio.

12 Feb 2026, 15:16

Type Values Removed Values Added
References () https://gist.github.com/ltduc147/c9abecae1b291ede4f692f2ab988c917 - () https://gist.github.com/ltduc147/c9abecae1b291ede4f692f2ab988c917 -
References () https://security.snyk.io/vuln/SNYK-JS-MARKDOWNIT-10666750 - () https://security.snyk.io/vuln/SNYK-JS-MARKDOWNIT-10666750 -

12 Feb 2026, 06:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-02-12 06:16

Updated : 2026-02-23 14:08

NVD link : CVE-2026-2327

Mitre link : CVE-2026-2327

CVE.ORG link : CVE-2026-2327

JSON object : View

Products Affected

markdown-it_project

  • markdown-it
CWE
CWE-1333

Inefficient Regular Expression Complexity