Package: node-markdown-it (22.2.3+dfsg+~12.2.3-2) Fast and easy to extend markdown parser Download node-markdown-it Package file paths (0) Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.
No package-associated file paths were observed for the displayed build metadata.
Field source: Debian 12 (Bookworm) main amd64
Use this package OpenFactory can boot this operating system in a browser VM, or start a build that includes the native package name from this record.
Versions, suites, and repositories Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.
Known vulnerabilities Matching against OpenFactory catalog package versions is in progress.
CVE Severity Version impact [CVE-2026-111766 ] Published: Oct 19, 2026, 7:47:46 PM UTC
markdown-it is a Markdown parser. Prior to 14.3.3 and 15.0.3, when the html option or commonmark preset is enabled and the constructs occur inside a paragraph, attacker-controlled Markdown containing
Low(3.7) Affected Details (2) 22.2.3+dfsg+~12.2.3-2 · all · bookworm
Affected
nvd · node-markdown-it · debian · bookworm; nvd · node-markdown-it · debian · 12
22.2.3+dfsg+~12.2.3-2 · all · bookworm
Affected
nvd · node-markdown-it · debian · bookworm; nvd · node-markdown-it · debian · 12
[CVE-2026-111759 ] Published: Oct 19, 2026, 5:39:10 PM UTC
markdown-it is a Markdown parser. Prior to 14.3.2 and 15.0.2, when typographer: true is enabled, specially crafted Markdown can cause quadratic processing time in the smartquotes rule, potentially lea
High(7.5) Affected Details (2) 22.2.3+dfsg+~12.2.3-2 · all · bookworm
Affected
nvd · node-markdown-it · debian · bookworm; nvd · node-markdown-it · debian · 12
22.2.3+dfsg+~12.2.3-2 · all · bookworm
Affected
nvd · node-markdown-it · debian · bookworm; nvd · node-markdown-it · debian · 12
[CVE-2026-48988 ] Published: Jun 17, 2026, 8:54:06 PM UTC
markdown-it is a Markdown parser. Versions 14.1.1 and below contain a denial-of-service vulnerability when typographer: true is enabled, due to quadratic (O(n^2)) processing in the smartquotes rule. T
Medium(5.3) Affected Details (2) 22.2.3+dfsg+~12.2.3-2 · all · bookworm
Affected
nvd · node-markdown-it · debian · bookworm; nvd · node-markdown-it · debian · 12
22.2.3+dfsg+~12.2.3-2 · all · bookworm
Affected
nvd · node-markdown-it · debian · bookworm; nvd · node-markdown-it · debian · 12
[CVE-2025-7969 ] Published: Aug 21, 2025, 5:15:32 PM UTC
node-markdown-it: CVE-2025-7969
Low Affected Details (2) 22.2.3+dfsg+~12.2.3-2 · all · bookworm
Affected
dsa · node-markdown-it · debian · bookworm; dsa · node-markdown-it · debian · 12
22.2.3+dfsg+~12.2.3-2 · all · bookworm
Affected
dsa · node-markdown-it · debian · bookworm; dsa · node-markdown-it · debian · 12
Fixed and unaffected versions (3) CVE Severity Version impact [CVE-2026-111758 ] Published: Oct 20, 2026, 8:28:40 PM UTC
node-markdown-it: CVE-2026-111758
High(7.5) Not affected Details (2) 22.2.3+dfsg+~12.2.3-2 · all · bookworm
Not affected
dsa · node-markdown-it · debian · bookworm
22.2.3+dfsg+~12.2.3-2 · all · bookworm
Not affected
dsa · node-markdown-it · debian · bookworm
[CVE-2026-2327 ] Published: Feb 12, 2026, 5:00:07 AM UTC
node-markdown-it: CVE-2026-2327
High(7.5) Not affected Details (2) 22.2.3+dfsg+~12.2.3-2 · all · bookworm
Not affected
dsa · node-markdown-it · debian · bookworm
22.2.3+dfsg+~12.2.3-2 · all · bookworm
Not affected
dsa · node-markdown-it · debian · bookworm
[CVE-2022-21670 ] Published: Not reported
node-markdown-it: CVE-2022-21670
Medium Fixed Details (2) 22.2.3+dfsg+~12.2.3-2 · all · bookworm
Fixed · Fixed: 10.0.0+dfsg-6
dsa · node-markdown-it · debian · bookworm
22.2.3+dfsg+~12.2.3-2 · all · bookworm
Fixed · Fixed: 10.0.0+dfsg-6
dsa · node-markdown-it · debian · bookworm
Last synced: Oct 28, 2026, 3:52:27 AM UTC
[CVE catalog ]
Checksums Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.
22.2.3+dfsg+~12.2.3-2 / all Observed Sep 1, 2026 sha256 e05f86932168…f7931604Source-reported digest Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.
Source-reported digest (sha256): e05f8693216822dc3f4ff814414ce585bf596c843207d0b4b194513ef7931604
Verify download
printf '%s %s\n' 'e05f8693216822dc3f4ff814414ce585bf596c843207d0b4b194513ef7931604' 'node-markdown-it_22.2.3+dfsg+~12.2.3-2_all.deb' | sha256sum --check --strict -Field source: Debian 12 (Bookworm) main amd64
22.2.3+dfsg+~12.2.3-2 / all Observed Sep 1, 2026 sha256 e05f86932168…f7931604Source-reported digest Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.
Source-reported digest (sha256): e05f8693216822dc3f4ff814414ce585bf596c843207d0b4b194513ef7931604
Verify download
printf '%s %s\n' 'e05f8693216822dc3f4ff814414ce585bf596c843207d0b4b194513ef7931604' 'node-markdown-it_22.2.3+dfsg+~12.2.3-2_all.deb' | sha256sum --check --strict -Field source: Debian 12 (Bookworm) main arm64
