CVE-2026-111759 | markdown-it up to 14.3.1/15.0.1 smartquotes rule resource consumption

October 19, 2026 Yanac

A vulnerability labeled as problematic has been found in markdown-it up to 14.3.1/15.0.1. Affected by this vulnerability is an unknown functionality of the component smartquotes rule. Executing a manipulation can lead to resource consumption.

This vulnerability appears as CVE-2026-111759. The attack may be performed from remote. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More