PatchTheCVEdo-markdownit vulnerabilities and fixes
Recent CVEs affecting do-markdownit, with upgrade or downgrade steps. 1 tracked.
Also searched as: do markdownit.
do-markdownit has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2025-09-19. Highest priority: CVE-2025-59717 (score 37/100).
- CVE-2025-59717 MEDIUM 5.4 UPGRADE In the @digitalocean/do-markdownit package through 1.16.1 (in npm), the callout and fence_environment plugins
FAQ
How do I fix do-markdownit vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is do-markdownit being exploited right now?
None of the tracked do-markdownit CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which do-markdownit CVE should I patch first?
CVE-2025-59717 currently ranks highest (37/100): In the @digitalocean/do-markdownit package through 1.16.1 (in npm), the callout and fence_environment plugins .