Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
markdown-it may let attackers execute code
published 8 days ago
Summary
The markdown-it component in your software could be tricked into running unwanted code, potentially compromising your system. TuxCare has released an updated version that removes this risk. Install the 12.3.0-tuxcare.4 update to protect your environment.
What to do
- Update vitaly markdown-it to version 12.3.0-tuxcare.4.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:npm | vitaly | markdown-it |
>= 12.3.0-tuxcare.0, < 12.3.0-tuxcare.4 Fix: upgrade to 12.3.0-tuxcare.4
|
Original advisory text
TuxCare security update for markdown-it (1 CVE)
TuxCare rebuilt markdown-it to address 1 CVE. Fixed in 12.3.0-tuxcare.4.
Timeline
Published27 Oct 2026
Updated27 Oct 2026
First seen27 Oct 2026
Sources
CLSA-2026-1793099982 · OSV
Track software like this
Free during beta