Detections
Analytics
SCA: security update for markdown-it (GHSA-253c-mchw-3w2r)
high Tenable Self-Hosted Container Security Plugin ID 448494
Description
markdown-it linkify: true has two quadratic paths, so a few hundred KB of markdown blocks the event loop for tens of secondsSolution
Update the markdown-it library and its related packages to version 14.3.1 or later.See Also
Plugin Details
Severity: High
ID: 448494
Version: Revision 1.1
Type: Local
Family: SCA Checks
Published: 9/29/2026
Updated: 9/29/2026
Vulnerability Information
Exploit Ease: No known exploits are available
Patch Publication Date: 9/29/2026
Vulnerability Publication Date: 9/29/2026