ID CVE-2022-21670
Summary markdown-it is a Markdown parser. Prior to version 1.3.2, special patterns with length greater than 50 thousand characterss could slow down the parser significantly. Users should upgrade to version 12.3.2 to receive a patch. There are no known workarounds aside from upgrading.
References
Vulnerable Configurations
  • cpe:2.3:a:markdown-it_project:markdown-it:2.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:markdown-it_project:markdown-it:2.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:markdown-it_project:markdown-it:2.1.0:*:*:*:*:*:*:*
    cpe:2.3:a:markdown-it_project:markdown-it:2.1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:markdown-it_project:markdown-it:2.1.1:*:*:*:*:*:*:*
    cpe:2.3:a:markdown-it_project:markdown-it:2.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:markdown-it_project:markdown-it:2.1.2:*:*:*:*:*:*:*
    cpe:2.3:a:markdown-it_project:markdown-it:2.1.2:*:*:*:*:*:*:*
  • cpe:2.3:a:markdown-it_project:markdown-it:2.1.3:*:*:*:*:*:*:*
    cpe:2.3:a:markdown-it_project:markdown-it:2.1.3:*:*:*:*:*:*:*
  • cpe:2.3:a:markdown-it_project:markdown-it:2.2.0:*:*:*:*:*:*:*
    cpe:2.3:a:markdown-it_project:markdown-it:2.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:markdown-it_project:markdown-it:2.2.1:*:*:*:*:*:*:*
    cpe:2.3:a:markdown-it_project:markdown-it:2.2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:markdown-it_project:markdown-it:3.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:markdown-it_project:markdown-it:3.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:markdown-it_project:markdown-it:3.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:markdown-it_project:markdown-it:3.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:markdown-it_project:markdown-it:3.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:markdown-it_project:markdown-it:3.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:markdown-it_project:markdown-it:3.0.3:*:*:*:*:*:*:*
    cpe:2.3:a:markdown-it_project:markdown-it:3.0.3:*:*:*:*:*:*:*
  • cpe:2.3:a:markdown-it_project:markdown-it:3.0.4:*:*:*:*:*:*:*
    cpe:2.3:a:markdown-it_project:markdown-it:3.0.4:*:*:*:*:*:*:*
  • cpe:2.3:a:markdown-it_project:markdown-it:3.0.5:*:*:*:*:*:*:*
    cpe:2.3:a:markdown-it_project:markdown-it:3.0.5:*:*:*:*:*:*:*
  • cpe:2.3:a:markdown-it_project:markdown-it:3.0.6:*:*:*:*:*:*:*
    cpe:2.3:a:markdown-it_project:markdown-it:3.0.6:*:*:*:*:*:*:*
  • cpe:2.3:a:markdown-it_project:markdown-it:3.0.7:*:*:*:*:*:*:*
    cpe:2.3:a:markdown-it_project:markdown-it:3.0.7:*:*:*:*:*:*:*
  • cpe:2.3:a:markdown-it_project:markdown-it:3.1.0:*:*:*:*:*:*:*
    cpe:2.3:a:markdown-it_project:markdown-it:3.1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:markdown-it_project:markdown-it:4.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:markdown-it_project:markdown-it:4.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:markdown-it_project:markdown-it:4.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:markdown-it_project:markdown-it:4.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:markdown-it_project:markdown-it:4.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:markdown-it_project:markdown-it:4.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:markdown-it_project:markdown-it:4.0.3:*:*:*:*:*:*:*
    cpe:2.3:a:markdown-it_project:markdown-it:4.0.3:*:*:*:*:*:*:*
  • cpe:2.3:a:markdown-it_project:markdown-it:4.1.0:*:*:*:*:*:*:*
    cpe:2.3:a:markdown-it_project:markdown-it:4.1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:markdown-it_project:markdown-it:4.1.1:*:*:*:*:*:*:*
    cpe:2.3:a:markdown-it_project:markdown-it:4.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:markdown-it_project:markdown-it:4.1.2:*:*:*:*:*:*:*
    cpe:2.3:a:markdown-it_project:markdown-it:4.1.2:*:*:*:*:*:*:*
  • cpe:2.3:a:markdown-it_project:markdown-it:4.2.0:*:*:*:*:*:*:*
    cpe:2.3:a:markdown-it_project:markdown-it:4.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:markdown-it_project:markdown-it:4.2.1:*:*:*:*:*:*:*
    cpe:2.3:a:markdown-it_project:markdown-it:4.2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:markdown-it_project:markdown-it:4.2.2:*:*:*:*:*:*:*
    cpe:2.3:a:markdown-it_project:markdown-it:4.2.2:*:*:*:*:*:*:*
  • cpe:2.3:a:markdown-it_project:markdown-it:4.3.0:*:*:*:*:*:*:*
    cpe:2.3:a:markdown-it_project:markdown-it:4.3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:markdown-it_project:markdown-it:4.3.1:*:*:*:*:*:*:*
    cpe:2.3:a:markdown-it_project:markdown-it:4.3.1:*:*:*:*:*:*:*
  • cpe:2.3:a:markdown-it_project:markdown-it:4.4.0:*:*:*:*:*:*:*
    cpe:2.3:a:markdown-it_project:markdown-it:4.4.0:*:*:*:*:*:*:*
  • cpe:2.3:a:markdown-it_project:markdown-it:5.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:markdown-it_project:markdown-it:5.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:markdown-it_project:markdown-it:5.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:markdown-it_project:markdown-it:5.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:markdown-it_project:markdown-it:5.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:markdown-it_project:markdown-it:5.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:markdown-it_project:markdown-it:5.0.3:*:*:*:*:*:*:*
    cpe:2.3:a:markdown-it_project:markdown-it:5.0.3:*:*:*:*:*:*:*
  • cpe:2.3:a:markdown-it_project:markdown-it:5.1.0:*:*:*:*:*:*:*
    cpe:2.3:a:markdown-it_project:markdown-it:5.1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:markdown-it_project:markdown-it:6.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:markdown-it_project:markdown-it:6.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:markdown-it_project:markdown-it:6.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:markdown-it_project:markdown-it:6.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:markdown-it_project:markdown-it:6.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:markdown-it_project:markdown-it:6.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:markdown-it_project:markdown-it:6.0.3:*:*:*:*:*:*:*
    cpe:2.3:a:markdown-it_project:markdown-it:6.0.3:*:*:*:*:*:*:*
  • cpe:2.3:a:markdown-it_project:markdown-it:6.0.4:*:*:*:*:*:*:*
    cpe:2.3:a:markdown-it_project:markdown-it:6.0.4:*:*:*:*:*:*:*
  • cpe:2.3:a:markdown-it_project:markdown-it:6.0.5:*:*:*:*:*:*:*
    cpe:2.3:a:markdown-it_project:markdown-it:6.0.5:*:*:*:*:*:*:*
  • cpe:2.3:a:markdown-it_project:markdown-it:6.1.0:*:*:*:*:*:*:*
    cpe:2.3:a:markdown-it_project:markdown-it:6.1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:markdown-it_project:markdown-it:6.1.1:*:*:*:*:*:*:*
    cpe:2.3:a:markdown-it_project:markdown-it:6.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:markdown-it_project:markdown-it:7.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:markdown-it_project:markdown-it:7.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:markdown-it_project:markdown-it:7.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:markdown-it_project:markdown-it:7.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:markdown-it_project:markdown-it:8.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:markdown-it_project:markdown-it:8.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:markdown-it_project:markdown-it:8.2.0:*:*:*:*:*:*:*
    cpe:2.3:a:markdown-it_project:markdown-it:8.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:markdown-it_project:markdown-it:8.2.1:*:*:*:*:*:*:*
    cpe:2.3:a:markdown-it_project:markdown-it:8.2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:markdown-it_project:markdown-it:8.2.2:*:*:*:*:*:*:*
    cpe:2.3:a:markdown-it_project:markdown-it:8.2.2:*:*:*:*:*:*:*
  • cpe:2.3:a:markdown-it_project:markdown-it:8.3.0:*:*:*:*:*:*:*
    cpe:2.3:a:markdown-it_project:markdown-it:8.3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:markdown-it_project:markdown-it:8.3.1:*:*:*:*:*:*:*
    cpe:2.3:a:markdown-it_project:markdown-it:8.3.1:*:*:*:*:*:*:*
  • cpe:2.3:a:markdown-it_project:markdown-it:8.3.2:*:*:*:*:*:*:*
    cpe:2.3:a:markdown-it_project:markdown-it:8.3.2:*:*:*:*:*:*:*
  • cpe:2.3:a:markdown-it_project:markdown-it:8.4.0:*:*:*:*:*:*:*
    cpe:2.3:a:markdown-it_project:markdown-it:8.4.0:*:*:*:*:*:*:*
  • cpe:2.3:a:markdown-it_project:markdown-it:8.4.1:*:*:*:*:*:*:*
    cpe:2.3:a:markdown-it_project:markdown-it:8.4.1:*:*:*:*:*:*:*
  • cpe:2.3:a:markdown-it_project:markdown-it:8.4.2:*:*:*:*:*:*:*
    cpe:2.3:a:markdown-it_project:markdown-it:8.4.2:*:*:*:*:*:*:*
  • cpe:2.3:a:markdown-it_project:markdown-it:9.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:markdown-it_project:markdown-it:9.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:markdown-it_project:markdown-it:9.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:markdown-it_project:markdown-it:9.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:markdown-it_project:markdown-it:9.1.0:*:*:*:*:*:*:*
    cpe:2.3:a:markdown-it_project:markdown-it:9.1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:markdown-it_project:markdown-it:10.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:markdown-it_project:markdown-it:10.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:markdown-it_project:markdown-it:11.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:markdown-it_project:markdown-it:11.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:markdown-it_project:markdown-it:11.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:markdown-it_project:markdown-it:11.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:markdown-it_project:markdown-it:12.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:markdown-it_project:markdown-it:12.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:markdown-it_project:markdown-it:12.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:markdown-it_project:markdown-it:12.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:markdown-it_project:markdown-it:12.0.3:*:*:*:*:*:*:*
    cpe:2.3:a:markdown-it_project:markdown-it:12.0.3:*:*:*:*:*:*:*
  • cpe:2.3:a:markdown-it_project:markdown-it:12.0.4:*:*:*:*:*:*:*
    cpe:2.3:a:markdown-it_project:markdown-it:12.0.4:*:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 24-07-2023 - 13:54)
Impact:
Exploitability:
CWE CWE-1333
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:P
Last major update 24-07-2023 - 13:54
Published 10-01-2022 - 21:15
Last modified 24-07-2023 - 13:54
Back to Top