CVE-2026-48801 | markdown-it linkify-it up to 5.0.0 Link Recognition lib/LinkifyIt.js match input resource consumption

July 15, 2026 Yanac

A vulnerability classified as problematic was found in markdown-it linkify-it up to 5.0.0. This vulnerability affects the function Match of the file lib/LinkifyIt.js of the component Link Recognition. Executing a manipulation of the argument input can lead to resource consumption.

This vulnerability is tracked as CVE-2026-48801. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More