Bug 2561920

Summary: CVE-2026-111758 markdownlint-cli2: markdown-it: Denial of Service via unclosed link reference definitions [fedora-all]
Product: [Fedora] Fedora Reporter: Vipul Nair <vinair>
Component: markdownlint-cli2Assignee: Fabio Porcedda <fabio.porcedda>
Status: CLOSED ERRATA QA Contact:
Severity: high Docs Contact:
Priority: high    
Version: rawhideCC: fabio.porcedda
Target Milestone: ---Keywords: Security, SecurityTracking
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard: {"flaws": ["5c80b4a3-a25a-4e01-a289-cb36020941a6"]}
Fixed In Version: markdownlint-cli2-0.24.0-1.fc45 markdownlint-cli2-0.24.0-1.fc44 markdownlint-cli2-0.24.0-1.fc43 Doc Type: ---
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2026-11-05 01:02:16 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 2556455    

Description Vipul Nair 2026-10-27 12:01:43 UTC
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.

markdown-it is a Markdown parser. From versions 14.1.0 to before 14.3.3, and 15.0.0 to before 15.0.3, a link reference definition whose label or title is never closed is O(n²) with default options. Continuation lines are pulled lazily with str += lineContent in src/rules_block/reference.ts, and the subsequent charCodeAt and slice calls flatten the V8 cons-string, copying everything collected so far; this runs before the rule decides the definition is invalid. No options are required to trigger it. This issue has been patched in versions 14.3.3 and 15.0.3.

Comment 1 Fedora Update System 2026-10-27 17:53:44 UTC
FEDORA-2026-8f8cd892e5 (markdownlint-cli2-0.24.0-1.fc45) has been submitted as an update to Fedora 45.
https://bodhi.fedoraproject.org/updates/FEDORA-2026-8f8cd892e5

Comment 2 Fedora Update System 2026-10-27 17:54:13 UTC
FEDORA-2026-6215800886 (markdownlint-cli2-0.24.0-1.fc44) has been submitted as an update to Fedora 44.
https://bodhi.fedoraproject.org/updates/FEDORA-2026-6215800886

Comment 3 Fedora Update System 2026-10-27 18:08:35 UTC
FEDORA-2026-183d3c32a6 (markdownlint-cli2-0.24.0-1.fc43) has been submitted as an update to Fedora 43.
https://bodhi.fedoraproject.org/updates/FEDORA-2026-183d3c32a6

Comment 4 Fedora Update System 2026-10-28 03:19:28 UTC
FEDORA-2026-183d3c32a6 has been pushed to the Fedora 43 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2026-183d3c32a6`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2026-183d3c32a6

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 5 Fedora Update System 2026-10-28 03:46:32 UTC
FEDORA-2026-8f8cd892e5 has been pushed to the Fedora 45 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2026-8f8cd892e5`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2026-8f8cd892e5

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 6 Fedora Update System 2026-10-28 04:02:39 UTC
FEDORA-2026-6215800886 has been pushed to the Fedora 44 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2026-6215800886`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2026-6215800886

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 7 Fedora Update System 2026-11-05 01:02:16 UTC
FEDORA-2026-8f8cd892e5 (markdownlint-cli2-0.24.0-1.fc45) has been pushed to the Fedora 45 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 8 Fedora Update System 2026-11-05 01:26:28 UTC
FEDORA-2026-6215800886 (markdownlint-cli2-0.24.0-1.fc44) has been pushed to the Fedora 44 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 9 Fedora Update System 2026-11-05 01:46:02 UTC
FEDORA-2026-183d3c32a6 (markdownlint-cli2-0.24.0-1.fc43) has been pushed to the Fedora 43 stable repository.
If problem still persists, please make note of it in this bug report.