CVE-2026-2327: markdown-it_project markdown-it
CVSS: 7.5v3.1HighAnalyzed
AliasesUBUNTU-CVE-2026-2327CGA-8r3q-mh9v-q37fCGA-8v6r-pw4p-j28fCGA-xj4h-pw6x-hx5cCGA-xx2x-ffv2-gx5jGHSA-38c4-r59v-3vqwCGA-2qjc-3r4j-v8wjCGA-2v4w-8w6c-cm45CGA-2wc8-8rq6-v37hCGA-34f2-37m9-96xxCGA-4cg2-x6qx-ww5vCGA-4qj6-qww7-8vr2CGA-59qg-79m3-jhjfCGA-5cv7-f27c-fj4gCGA-5f47-fjw8-5gmrCGA-5fj6-mqm2-mqmhCGA-5g8v-3qxr-v2f6CGA-69h4-v244-9rh5CGA-6fpx-7v8f-xv66CGA-6xh3-cm3r-52gfCGA-73j5-r7w5-rxr9CGA-75v5-v785-qhxrCGA-7cgm-3mrg-2j6jCGA-7mc6-jxr9-6rmjCGA-7mgg-7r7m-qrwgCGA-7pr2-3wj5-234rCGA-7r2f-mwq3-jq6rCGA-7v3w-pw9m-jqwgCGA-7w76-2cxj-4gc3CGA-832g-5mh8-8rr7CGA-88f4-8gj6-q25jCGA-8rph-7wr9-v7gxCGA-9737-h724-75pcCGA-9gcx-f64x-wvrhCGA-9j84-p475-fxg2CGA-9p75-m266-jr9pCGA-9q48-9wqw-9vfhCGA-9qmx-j9x8-g7cpCGA-c4gh-j6g2-6xp9CGA-c572-c965-6v4mCGA-c7f4-7342-7238CGA-cf8c-x758-m22jCGA-cjr6-4hwq-qqrwCGA-cpmq-43v4-p83xCGA-cpp8-mvpq-r9w5CGA-cprc-gwr5-8r3gCGA-crgq-5vj3-r3cmCGA-f6g9-q8q9-hr9mCGA-f88w-fj9x-w453CGA-fgh7-j5vf-w895CGA-fjhv-fjrc-gwm3CGA-fm5f-2x3q-5q3hCGA-frmv-3gc9-v7qxCGA-fv68-78fj-mxx3CGA-g8hx-vpx6-85p5CGA-gwfx-r6vm-5wpwCGA-h2fc-mvww-fq78CGA-h38g-56q6-4wp3CGA-hm79-qjg4-9qrvCGA-j47r-3m8c-wfqqCGA-j635-vfxq-g4xcCGA-jfgv-vpfm-4c23CGA-jg23-j52h-j3j4CGA-jg3x-7q89-xxmpCGA-jppg-c6cv-vm2rCGA-jqfg-pf3x-w3hqCGA-jr2q-vj8h-97r2CGA-m22j-rc2r-xc4hCGA-m7c3-257g-5vpvCGA-m8jf-crjh-r496CGA-p8x8-m4f7-hgm5CGA-pjx2-8qx8-hhmcCGA-pmqx-r2jr-3j58CGA-pmrf-8mjx-fgmfCGA-pv4m-m82f-5w9qCGA-q52f-wrxj-xvpwCGA-q62c-27vm-m8q7CGA-qv8c-jqg5-wq4pCGA-qvg7-r9f5-53qvCGA-qvmg-9pw8-cgj2CGA-r8x3-cjm3-g63cCGA-rfqr-vf9m-8g67CGA-rh44-xrfw-2h3fCGA-rqjg-787j-4p8xCGA-rxfx-m9v6-q7mpCGA-v39c-8w52-v28xCGA-v3v5-47v6-x2x2CGA-v53f-v6gp-9pf7CGA-v8c2-rcpp-5hjcCGA-vwq6-jhrf-wrjvCGA-w48x-jcv6-6ppgCGA-w4m2-26xh-h36qCGA-x82p-6q22-5rr9CGA-xpv4-5m57-8g85
Published 12-02-2026Last modified 12-02-2026
Vulnerability summary
CVE-2026-2327 is a high (CVSS 7.5) vulnerability in markdown-it_project markdown-it. EPSS estimates a 0.74% chance of exploitation in the next 30 days, higher than 53.9% of scored vulnerabilities.
CVSS score
7.5/10
010
High · v3.1 (NVD)EPSS score
0.74%
0%100%
Low · +0.06 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 0 · Related 1Timeline
- 12-02-2026PublishedVulnerability first disclosed.
- 12-02-2026Last modifiedVulnerability information updated.
Description
Versions of the package markdown-it from 13.0.0 and before 14.1.1 are vulnerable to Regular Expression Denial of Service (ReDoS) due to the use of the regex /\*+$/ in the linkify function. An attacker can supply a long sequence of * characters followed by a non-matching character, which triggers excessive backtracking and may lead to a denial-of-service condition.
CVSS metrics
9 scores · 6 sources · 2 versionsMedium 6.9Preferred score · CVE.org (CNA)
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:PSources6 sources · 5.5–6.9
- OSV · UbuntuEcosystem advisory · calculated6.9MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P
- OSV · WolfiEcosystem advisory · calculated6.9MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P
- OSV · NpmEcosystem advisory · calculated6.9MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P
- OSV · ChainguardEcosystem advisory · calculated6.9MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P
- NVDNIST5.5MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XDiffers
High 7.5Preferred score · NVD (NIST)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HSources3 sources · 5.3–7.5
- OSV · UbuntuEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- OSV · NpmEcosystem advisory · calculated5.3MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:LDiffers
EPSS trend
Probability
0.74%
Chance of exploitation in the next 30 days
Percentile
54%
Versus all other CVEs
30-day change
+0.06 pp
From 0.68% on 21-09-2026
21-09-202621-10-2026
EPSS score0.74%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Chainguard46 products
- gitlab-rails-ce-18.1All versions (No fix recorded)
- gitlab-rails-ce-18.10All versions (No fix recorded)
- gitlab-rails-ce-18.11All versions (No fix recorded)
- gitlab-rails-ce-18.5All versions (No fix recorded)
- gitlab-rails-ce-18.6All versions (No fix recorded)
Wolfi2 products
- renovate< 43.25.2-r0
- vitess-23< 23.0.2-r1
Markdown-it_project1 product
- markdown-it≥ 13.0.0, < 14.1.1
Npm1 product
- markdown-it≥ 13.0.0, < 14.1.1
Ubuntu1 product
- node-markdown-itAll versions (No fix recorded)
5 vendors · 51 products
References
10 links- github.com/markdown-it/markdown-it/commit/4b4bbcae5e0990a5b172378e507b33a59012ed26REPORTFIXWEBPatchProduct
