Skip to content

Product

debian/node-turndown vulnerabilities

1 published CVE affecting debian/node-turndown, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0

Latest debian/node-turndown CVEs

Newest publication first

  1. CVE-2025-9670 mixmark-io turndown commonmark-rules.js redos

    Published
    MediumCVSS 6.9 EPSS 0.50%

    A security flaw has been discovered in mixmark-io turndown up to 7.2.1. This affects an unknown function of the file src/commonmark-rules.js. Performing manipulation results in inefficient regular expression complexity. It is possible to initiate the attack remotely. The exploit...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.