Digitalocean Do-markdownit — known CVE vulnerabilities
Every CVE whose affected-product data names Digitalocean Do-markdownit, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (1)
CVE-2025-59717 — CVSS 5.4 (medium): In the @digitalocean/do-markdownit package through 1.16.1 (in npm), the callout and fence_environment plugins perform .includes substring…