CVE-2022-21670: Markdown-It Project Markdown-It

Medium severity, CVSS 5.3. EPSS: 2.3% chance of exploitation in the next 30 days.

markdown-it is a Markdown parser. Prior to version 1.3.2, special patterns with length greater than 50 thousand characterss could slow down the parser significantly. Users should upgrade to version 12.3.2 to receive a patch. There are no known workarounds aside from upgrading.

Affected products

• Markdown-It Project Markdown-It: up to and including 12.3.1

Published 2022-01-10. Last modified 2026-06-17.