GHSA-6vfc-qv3f-vr6c
Uncontrolled Resource Consumption in markdown-it
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | markdown-it | < 12.3.2 | 12.3.2 |
Details
As written in the advisory (Markdown source, shown as plain text).
### Impact
Special patterns with length > 50K chars can slow down parser significantly.
```js
const md = require('markdown-it')();
md.render(`x ${' '.repeat(150000)} x \nx`);
```
### Patches
Upgrade to v12.3.2+
### Workarounds
No.
### References
Fix + test sample: https://github.com/markdown-it/markdown-it/commit/ffc49ab46b5b751cd2be0aabb146f2ef84986101
References
External links from the advisory. They lead to third-party sites.