GHSA-22p9-wv53-3rq4Published
linkify-it: Quadratic algorithmic complexity in LinkifyIt#match scan loop
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-48801 · Microsoft / collected KEV context
cve-program · CVE-2026-48801
- https://github.com/markdown-it/linkify-it/security/advisories/GHSA-22p9-wv53-3rq4
- https://github.com/markdown-it/linkify-it/commit/6be6d15e0641bf1daeaa977d500cabc743166159
nvd · CVE-2026-48801
- https://github.com/markdown-it/linkify-it/commit/6be6d15e0641bf1daeaa977d500cabc743166159
- https://github.com/markdown-it/linkify-it/security/advisories/GHSA-22p9-wv53-3rq4
osv · GHSA-22p9-wv53-3rq4
Related operational evidence
Explicit CVE identifiers- Jira Service Management Data Center: DoS (Denial of Service) linkify-it Dependency (CVE-2026-48801) · Security advisory · 15 Sep 2026