markdown-it is a Markdown parser. Prior to 14.3.3 and 15.0.3, when the html option or commonmark preset is enabled and the constructs occur inside a paragraph, attacker-controlled Markdown containing repeated unterminated inline HTML comments, processing instructions, declarations, or CDATA sections reaches src/rules_inline/html_inline.ts. Its HTML_TAG_RE match searches the remaining suffix for the appropriate terminator; when no terminator is present, parsing advances to the next opener and repeats the match over overlapping input, causing quadratic processing and denial of service through event-loop blocking or an unresponsive browser main thread. HTML blocks and the default HTML-disabled configuration are not affected by these payloads. This issue is fixed in versions 14.3.3 and 15.0.3.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-183d3c32a6 advisory.

    Update


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-6215800886 advisory.

    Update


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-8f8cd892e5 advisory.

    Update


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - markdown-it is a Markdown parser. Prior to 14.3.3 and 15.0.3, when the html option or commonmark preset is
    enabled and the constructs occur inside a paragraph, attacker-controlled Markdown containing repeated
    unterminated inline HTML comments, processing instructions, declarations, or CDATA sections reaches
    src/rules_inline/html_inline.ts. Its HTML_TAG_RE match searches the remaining suffix for the appropriate
    terminator; when no terminator is present, parsing advances to the next opener and repeats the match over
    overlapping input, causing quadratic processing and denial of service through event-loop blocking or an
    unresponsive browser main thread. HTML blocks and the default HTML-disabled configuration are not affected
    by these payloads. This issue is fixed in versions 14.3.3 and 15.0.3. (CVE-2026-111766)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - markdown-it is a Markdown parser. Prior to 14.3.3 and 15.0.3, when the html option or commonmark preset is     enabled and the constructs occur inside a paragraph, attacker-controlled Markdown containing repeated     unterminated inline HTML comments, processing instructions, declarations, or CDATA sections reaches     src/rules_inline/html_inline.ts. Its HTML_TAG_RE match searches the remaining suffix for the appropriate     terminator; when no terminator is present, parsing advances to the next opener and repeats the match over     overlapping input, causing quadratic processing and denial of service through event-loop blocking or an     unresponsive browser main thread. HTML blocks and the default HTML-disabled configuration are not affected     by these payloads. This issue is fixed in versions 14.3.3 and 15.0.3. (CVE-2026-111766)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
376333	Fedora 43 : markdownlint-cli2 (2026-183d3c32a6)	Nessus	Fedora Local Security Checks	Local	high
376327	Fedora 44 : markdownlint-cli2 (2026-6215800886)	Nessus	Fedora Local Security Checks	Local	high
376319	Fedora 45 : markdownlint-cli2 (2026-8f8cd892e5)	Nessus	Fedora Local Security Checks	Local	high
476577	Chainguard: multiple kibana-9.3 packages: security update to 9.3.8-r7	Tenable Cloud Security	Chainguard Local Security Checks	Local	low
476577	Chainguard: multiple kibana-9.3 packages: security update to 9.3.8-r7	Tenable Self-Hosted Container Security	Chainguard Local Security Checks	Local	low
369053	Linux Distros Unpatched Vulnerability : CVE-2026-111766	Nessus	Misc.	Local	low
476382	SCA: security update for markdown-it (GHSA-vfgh-jcmw-g37q)	Tenable Cloud Security	SCA Checks	Local	low
476382	SCA: security update for markdown-it (GHSA-vfgh-jcmw-g37q)	Tenable Self-Hosted Container Security	SCA Checks	Local	low

Detections

Analytics

CVE-2026-111766

low

Tenable Plugins

high

high

high

low

low

low

low

low