CLSA-2026-1794058822: TuxCare security update for markdown-it (4 CVEs)

The four CVE fixes are included in markdown-it version 14.2.0-tuxcare.1.

Update the package to 14.2.0-tuxcare.1 or a later TuxCare-provided version that includes this rebuild.

Published Nov 7, 2026

Updated

TuxCare rebuilt markdown-it to address 4 CVEs. Fixed in 14.2.0-tuxcare.1.

Affected Software

1 affected componentFixes available

tuxcare/markdown-it>=14.2.0-tuxcare.0<14.2.0-tuxcare.1

14.2.0-tuxcare.1

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade tuxcare/markdown-it to a version that resolves this vulnerability.
Fixed in 14.2.0-tuxcare.1
Upgrade
Upgrade markdown-it to a version that resolves this vulnerability.
Fixed in 14.2.0-tuxcare.1

Nov 7, 2026

Advisory Published

via OSV·02:40 PM

Data Sourced

via OSV·02:40 PM

DescriptionAffected Software

Contains the following vulnerabilities.

The four CVE fixes are included in markdown-it version 14.2.0-tuxcare.1.

Update the package to 14.2.0-tuxcare.1 or a later TuxCare-provided version that includes this rebuild.