Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| markdown-it | markdown-it | affected |
|
No data.
No data.
No data available yet.
No solution or workaround provided in the CVE record.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
No advisories yet.
Mon, 19 Oct 2026 19:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Mon, 19 Oct 2026 18:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | markdown-it is a Markdown parser. Prior to 14.3.2 and 15.0.2, smartquotes is affected: many opening quotes of one type followed by unmatched closing quotes of the other type cause the smartquotes rule to repeatedly scan the entire opener stack, resulting in quadratic processing time. The root cause is each mismatched quote closer repeatedly scans the opener stack for a compatible quote type. The attack mechanism is quadratic rescanning of the quote opener stack. The affected identifiers are smartquotes and typographer. The trigger conditions are attacker-controlled Markdown with many openers of one quote type and unmatched closers of the other type and typographer mode is enabled. The impact is denial of service through excessive parsing time. The vulnerable path requires typographer mode; disabling typographer or the smartquotes rule prevents the affected processing. This issue is fixed in versions 14.3.2 and 15.0.2. | markdown-it is a Markdown parser. Prior to 14.3.2 and 15.0.2, when typographer: true is enabled, specially crafted Markdown can cause quadratic processing time in the smartquotes rule, potentially leading to denial of service in applications processing untrusted input. Many opening double quotes followed by unmatched closing single quotes cause repeated scans of the entire opener stack. The same issue occurs with the quote types reversed. The default configuration (typographer: false) is not affected, but this option is enabled with high probability. This issue is fixed in versions 14.3.2 and 15.0.2. |
Mon, 19 Oct 2026 17:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | markdown-it is a Markdown parser. Prior to 14.3.2 and 15.0.2, smartquotes is affected: many opening quotes of one type followed by unmatched closing quotes of the other type cause the smartquotes rule to repeatedly scan the entire opener stack, resulting in quadratic processing time. The root cause is each mismatched quote closer repeatedly scans the opener stack for a compatible quote type. The attack mechanism is quadratic rescanning of the quote opener stack. The affected identifiers are smartquotes and typographer. The trigger conditions are attacker-controlled Markdown with many openers of one quote type and unmatched closers of the other type and typographer mode is enabled. The impact is denial of service through excessive parsing time. The vulnerable path requires typographer mode; disabling typographer or the smartquotes rule prevents the affected processing. This issue is fixed in versions 14.3.2 and 15.0.2. | |
| Title | markdown-it: Quadratic complexity in smartquotes with unmatched closing quotes | |
| Weaknesses | CWE-400 CWE-407 |
|
| References |
|
|
| Metrics |
cvssV3_1
|
Subscriptions
No data.
MITRE
Status: PUBLISHED
Assigner: GitHub_M
Published:
Updated: 2026-10-19T18:22:54.696Z
Reserved: 2026-10-16T17:52:09.081Z
Link: CVE-2026-111759
Vulnrichment
Updated: 2026-10-19T18:22:49.654Z
NVD
Status : Received
Published: 2026-10-19T18:17:00.570
Modified: 2026-10-19T19:17:23.487
Link: CVE-2026-111759
Redhat
No data.
OpenCVE Enrichment
Updated: 2026-10-19T19:30:02Z