Read the docs

DigitalOcean

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

DigitalOcean records in CISA KEV

No DigitalOcean vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Do-markdownit 1 record HIGH Golang-nanoauth 1 record MEDIUM

Records

1 record in Do-markdownit · all components

TI-2025-37177 CVE-2025-59717 · GHSA-2h8j-8r9p-849f

Type confusion in DigitalOcean @digitalocean/do-markdownit

Priority HIGH 75

In the @digitalocean/do-markdownit package through 1.16.1 (in npm), the callout and fence_environment plugins perform .includes substring matching if allowedClasses or allowedEnvironments is a string (instead of an array…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00387 Published 2025-09-19 No fix listed CWE-843
Open these records in search →