CVE-2025-7969
Markdown-it 14.1.0 - Cross-site scripting (XSS)
Summary
Markdown-it 14.1.0 - Cross-site scripting (XSS)
Original description
The description as published by the source.
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in markdown-it allows Cross-Site Scripting (XSS). This vulnerability is associated with program files lib/renderer.mjs.
This issue affects markdown-it: 14.1.0. NOTE: the Supplier does not consider this issue to be a vulnerability.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2025-7969 node-markdown-it
- Ubuntu UBUNTU-CVE-2025-7969 node-markdown-it
References
- advisory fluidattacks.com
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- report github.com
- web registry.npmjs.org