CVE-2026-48988 | markdown-it up to 14.1.x Markdown Parser replaceAt resource consumption (GHSA-6v5v-wf23-fmfq)

A vulnerability, which was classified as problematic, was found in markdown-it up to 14.1.x. The affected element is the function replaceAt of the component Markdown Parser. Executing a manipulation can lead to resource consumption.

This vulnerability is handled as CVE-2026-48988. The attack can be executed remotely. There is not any exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More