Vulnerabilities > CVE-2022-21670 - Unspecified vulnerability in Markdown-It Project Markdown-It

CVSS 5.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

LOW

network

low complexity

markdown-it-project

NVD

Published: 2022-01-10

Updated: 2023-07-24

Summary

markdown-it is a Markdown parser. Prior to version 1.3.2, special patterns with length greater than 50 thousand characterss could slow down the parser significantly. Users should upgrade to version 12.3.2 to receive a patch. There are no known workarounds aside from upgrading.

Vulnerable Configurations

Part	Description	Count
Application	Markdown-It_Project Markdown IT Project Markdown IT 2.0.0 Markdown IT Project Markdown IT 2.1.0 Markdown IT Project Markdown IT 2.1.1 Markdown IT Project Markdown IT 2.1.2 Markdown IT Project Markdown IT 2.1.3 Markdown IT Project Markdown IT 2.2.0 Markdown IT Project Markdown IT 2.2.1 Markdown IT Project Markdown IT 3.0.0 Markdown IT Project Markdown IT 3.0.1 Markdown IT Project Markdown IT 3.0.2 Markdown IT Project Markdown IT 3.0.3 Markdown IT Project Markdown IT 3.0.4 Markdown IT Project Markdown IT 3.0.5 Markdown IT Project Markdown IT 3.0.6 Markdown IT Project Markdown IT 3.0.7 Markdown IT Project Markdown IT 3.1.0 Markdown IT Project Markdown IT 4.0.0 Markdown IT Project Markdown IT 4.0.1 Markdown IT Project Markdown IT 4.0.2 Markdown IT Project Markdown IT 4.0.3 Markdown IT Project Markdown IT 4.1.0 Markdown IT Project Markdown IT 4.1.1 Markdown IT Project Markdown IT 4.1.2 Markdown IT Project Markdown IT 4.2.0 Markdown IT Project Markdown IT 4.2.1 Markdown IT Project Markdown IT 4.2.2 Markdown IT Project Markdown IT 4.3.0 Markdown IT Project Markdown IT 4.3.1 Markdown IT Project Markdown IT 4.4.0 Markdown IT Project Markdown IT 5.0.0 Markdown IT Project Markdown IT 5.0.1 Markdown IT Project Markdown IT 5.0.2 Markdown IT Project Markdown IT 5.0.3 Markdown IT Project Markdown IT 5.1.0 Markdown IT Project Markdown IT 6.0.0 Markdown IT Project Markdown IT 6.0.1 Markdown IT Project Markdown IT 6.0.2 Markdown IT Project Markdown IT 6.0.3 Markdown IT Project Markdown IT 6.0.4 Markdown IT Project Markdown IT 6.0.5 Markdown IT Project Markdown IT 6.1.0 Markdown IT Project Markdown IT 6.1.1 Markdown IT Project Markdown IT 7.0.0 Markdown IT Project Markdown IT 7.0.1 Markdown IT Project Markdown IT 8.0.0 Markdown IT Project Markdown IT 8.2.0 Markdown IT Project Markdown IT 8.2.1 Markdown IT Project Markdown IT 8.2.2 Markdown IT Project Markdown IT 8.3.0 Markdown IT Project Markdown IT 8.3.1 Markdown IT Project Markdown IT 8.3.2 Markdown IT Project Markdown IT 8.4.0 Markdown IT Project Markdown IT 8.4.1 Markdown IT Project Markdown IT 8.4.2 Markdown IT Project Markdown IT 9.0.0 Markdown IT Project Markdown IT 9.0.1 Markdown IT Project Markdown IT 9.1.0 Markdown IT Project Markdown IT 10.0.0 Markdown IT Project Markdown IT 11.0.0 Markdown IT Project Markdown IT 11.0.1 Markdown IT Project Markdown IT 12.0.0 Markdown IT Project Markdown IT 12.0.2 Markdown IT Project Markdown IT 12.0.3 Markdown IT Project Markdown IT 12.0.4	64

Summary

Vulnerable Configurations

References