CVE-2026-111766 | markdown-it up to 14.3.2/15.0.2 Inline HTML Parser html_inline.ts resource consumption

A vulnerability labeled as problematic has been found in markdown-it up to 14.3.2/15.0.2. This impacts an unknown function of the file src/rules_inline/html_inline.ts of the component Inline HTML Parser. Executing a manipulation can lead to resource consumption.

This vulnerability is registered as CVE-2026-111766. It is possible to launch the attack remotely. No exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More