markdown-it project kayıtları
markdown-it project üreticisine ait 6 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %83,3
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-1333 Inefficient Regular Expression Complexity2
- CWE-400 Uncontrolled Resource Consumption2
- CWE-284 Improper Access Control1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
6 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
30İzleyin | CVE-2015-10005İstismar yok | markdown-it html_re.js redosmarkdown-it project · markdown-it · CWE-1333 | Yüksek7,5 | — | %0,9 | 27 Ara 2022 |
27İzleyin | CVE-2025-7969İstismar yok | Markdown-it 14.1.0 - Cross-site scripting (XSS)markdown-it project · markdown-it · CWE-79 | Orta6,9 | — | %0,2 | 21 Ağu 2025 |
22İzleyin | CVE-2022-21670İstismar yok | Uncontrolled Resource Consumption in markdown-itmarkdown-it project · markdown-it · CWE-400 | Orta5,3 | — | %2,2 | 10 Oca 2022 |
22İzleyin | CVE-2026-2327İstismar yok | Versions of the package markdown-it from 13.0.0 and before 14.1.1 are vulnerable to Regular Expression Denial of Service (ReDoS) due to the markdown-it project · markdown-it · CWE-1333 | Orta5,5 | — | %0,7 | 12 Şub 2026 |
21İzleyin | CVE-2015-3295İstismar yok | markdown-it before 4.1.0 does not block data: URLs.markdown-it project · markdown-it · CWE-284 | Orta5,3 | — | %1,3 | 7 Haz 2017 |
21İzleyin | CVE-2026-48988İstismar yok | markdown-it: Quadratic complexity DoS in smartquotes rule via replaceAt string operationsmarkdown-it project · markdown-it · CWE-400 | Orta5,3 | — | %0,4 | 17 Haz 2026 |
- CVE-2015-1000530İzleyin
markdown-it html_re.js redos
YüksekCVSS 7,5İstismar yokEPSS %1markdown-it project · markdown-it27 Ara 2022
- CVE-2025-796927İzleyin
Markdown-it 14.1.0 - Cross-site scripting (XSS)
OrtaCVSS 6,9İstismar yokEPSS %0markdown-it project · markdown-it21 Ağu 2025
- CVE-2022-2167022İzleyin
Uncontrolled Resource Consumption in markdown-it
OrtaCVSS 5,3İstismar yokEPSS %2markdown-it project · markdown-it10 Oca 2022
- CVE-2026-232722İzleyin
Versions of the package markdown-it from 13.0.0 and before 14.1.1 are vulnerable to Regular Expression Denial of Service (ReDoS) due to the
OrtaCVSS 5,5İstismar yokEPSS %1markdown-it project · markdown-it12 Şub 2026
- CVE-2015-329521İzleyin
markdown-it before 4.1.0 does not block data: URLs.
OrtaCVSS 5,3İstismar yokEPSS %1markdown-it project · markdown-it7 Haz 2017
- CVE-2026-4898821İzleyin
markdown-it: Quadratic complexity DoS in smartquotes rule via replaceAt string operations
OrtaCVSS 5,3İstismar yokEPSS %0markdown-it project · markdown-it17 Haz 2026