There is 1 open security issue in bookworm.
1 issue left for the package maintainer to handle:
- CVE-2025-9670:
(needs triaging)
A security flaw has been discovered in mixmark-io turndown up to 7.2.1. This affects an unknown function of the file src/commonmark-rules.js. Performing manipulation results in inefficient regular expression complexity. It is possible to initiate the attack remotely. The exploit has been released to the public and may be exploited.
You can find information about how to handle this issue in the security team's documentation.