Approved changes feed: RSS · Atom

cpe:2.3:a:markdown-it:markdown-it:14.1.0:*:*:*:*:*:*:*

part: a version: 14.1.0 update: *

VendorMarkdown It (bdbcfa93-9d16-536c-9aae-f65ace6bb9e5)
ProductMarkdown It (935138ed-da15-5587-aabe-28a160c80e5b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-7969 vulnerable 2026-06-08 07:45:18.585778 Markdown-it 14.1.0 - Cross-site scripting (XSS)
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in markdown-it allows Cross-Site Scripting (XSS). This vulnerability is associated with program files lib/renderer.mjs. This issue affects markdown-it: 14.1.0. NOTE: the Supplier does not consider this issue to be a vulnerability.
Published: 2025-08-21T16:40:05.915Z
Updated: 2025-12-03T21:06:03.862Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.