There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - markdown-it is a Markdown parser. From versions 14.1.0 to before 14.3.3, and 15.0.0 to before 15.0.3, a
    link reference definition whose label or title is never closed is O(n²) with default options. Continuation
    lines are pulled lazily with str += lineContent in src/rules_block/reference.ts, and the subsequent
    charCodeAt and slice calls flatten the V8 cons-string, copying everything collected so far; this runs
    before the rule decides the definition is invalid. No options are required to trigger it. This issue has
    been patched in versions 14.3.3 and 15.0.3. (CVE-2026-111758)

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - markdown-it 是一款 Markdown 解析器。从版本 14.1.0 到 before 14.3.3和 15.0.0 到 before 15.0.3，标签或标题永远不会关闭的链接引用定义是具有默认选项的 O（n）。在 src/rules_block/reference.ts 中使用 str += lineContent 延迟拉取延续行，后续的 charCodeAt 和 slice 调用扁平 V8 cons-string，复制到目前为止收集的所有内容;这在规则确定定义无效之前运行。无须任何选项即可触发。已在版本 14.3.3 和 15.0.3 中修补此问题。(CVE-2026-111758)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且廠商未提供可用的修補程式。

  - markdown-它是一個 Markdown 解析器。從版本 14.1.0 到 之前 14.3.3，以及 15.0.0 之前 15.0.3，其標籤或標題永不關閉的連結參照定義是具有預設選項的 O（n）。在 src/rules_block/reference.ts 中使用 str += lineContent 延遲拉取延續行，後續的 charCodeAt 和 slice 呼叫會展平 V8 cons-string，複製迄今為止收集的所有內容;這會在規則判斷定義無效之前執行。不需要任何選項即可觸發它。此問題已在 14.3.3、15.0.3 和 CVE-2026-111758 版本中修正。

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - markdown-it は Markdown パーサーです。14.1.0 から 14.3.3 より前、および 15.0.0 から 15.0.3 より前のバージョンでは、ラベルまたはタイトルが決して閉じられていないリンク参照定義は、デフォルトオプションで O(n) です。継続行は src/rules_block/reference.ts の str += lineContent でゆっくりとプルされ、後続の charCodeAt と slice 呼び出しは V8 cons-string をフラット化し、これまでに収集されたすべてのものをコピーします。これは、ルールが定義を無効と判断する前に実行されます。トリガーするためのオプションは必要ありません。この問題には、バージョン 14.3.3および 15.0.3でパッチが適用されています。(CVE-2026-111758)

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-183d3c32a6 advisory.

    Update


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-8f8cd892e5 advisory.

    Update


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - markdown-it is a Markdown parser. From versions 14.1.0 to before 14.3.3, and 15.0.0 to before 15.0.3, a     link reference definition whose label or title is never closed is O(n) with default options. Continuation     lines are pulled lazily with str += lineContent in src/rules_block/reference.ts, and the subsequent     charCodeAt and slice calls flatten the V8 cons-string, copying everything collected so far; this runs     before the rule decides the definition is invalid. No options are required to trigger it. This issue has     been patched in versions 14.3.3 and 15.0.3. (CVE-2026-111758)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-6215800886 advisory.

    Update


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
476402	SCA: security update for markdown-it (GHSA-gfr2-rv44-r23c)	Tenable Cloud Security	SCA Checks	10/21/2026	10/21/2026	high
476402	SCA: security update for markdown-it (GHSA-gfr2-rv44-r23c)	Tenable Self-Hosted Container Security	SCA Checks	10/21/2026	10/21/2026	high
476573	Chainguard: multiple kibana-9.3 packages: security update to 9.3.8-r7	Tenable Cloud Security	Chainguard Local Security Checks	10/22/2026	10/22/2026	high
476573	Chainguard: multiple kibana-9.3 packages: security update to 9.3.8-r7	Tenable Self-Hosted Container Security	Chainguard Local Security Checks	10/22/2026	10/22/2026	high
371289	Linux Distros 未修补的漏洞：CVE-2026-111758	Nessus	Misc.	10/23/2026	10/30/2026	high
371289	Linux Distros 未修補弱點：CVE-2026-111758	Nessus	Misc.	10/23/2026	10/30/2026	high
371289	Linux Distros のパッチ未適用の脆弱性: CVE-2026-111758	Nessus	Misc.	10/23/2026	10/30/2026	high
376333	Fedora 43 : markdownlint-cli2 (2026-183d3c32a6)	Nessus	Fedora Local Security Checks	11/5/2026	11/5/2026	high
376319	Fedora 45 : markdownlint-cli2 (2026-8f8cd892e5)	Nessus	Fedora Local Security Checks	11/5/2026	11/5/2026	high
371289	Linux Distros Unpatched Vulnerability : CVE-2026-111758	Nessus	Misc.	10/23/2026	10/30/2026	high
376327	Fedora 44 : markdownlint-cli2 (2026-6215800886)	Nessus	Fedora Local Security Checks	11/5/2026	11/5/2026	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

high

high

high

high