Approved changes feed: RSS · Atom

cpe:2.3:a:digitalocean:@digitalocean/do-markdownit:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorDigitalocean (cb7391e9-6e4c-5d93-896a-a91ac90d90da)
Product@Digitalocean/Do Markdownit (c0dca6c8-c006-5ef9-963a-1cc1361644ac)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-59717 vulnerable 2026-06-08 07:35:22.930755 Details available
MEDIUM (5.4)
In the @digitalocean/do-markdownit package through 1.16.1 (in npm), the callout and fence_environment plugins perform .includes substring matching if allowedClasses or allowedEnvironments is a string (instead of an array).
Published: 2025-09-19T00:00:00.000Z
Updated: 2025-09-19T13:32:08.575Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.