← Back

Do Markdownit

do-markdownit

Vendor: Digitalocean • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Digitalocean
1Do Markdownit
Jun 17, 2026
Sep 19, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
In the @digitalocean/do-markdownit package through 1.16.1 (in npm), the callout and fence_environment plugins perform .includes substring matching if allowedClasses or allowedEnvironments is a string (instead of an array...Show more
In the @digitalocean/do-markdownit package through 1.16.1 (in npm), the callout and fence_environment plugins perform .includes substring matching if allowedClasses or allowedEnvironments is a string (instead of an array).Show less