CVE-2026-48988 | markdown-it up to 14.1.x Markdown Parser replaceAt resource consumption (GHSA-6v5v-wf23-fmfq / EUVD-2026-37799)

A vulnerability, which was classified as . The affected element is the function replaceAt of the component Markdown Parser. Executing a manipulation can lead to resource consumption.

This vulnerability is handled as CVE-2026-48988. The attack can be executed remotely. There is not any exploit available.

You should upgrade the affected component.