CVE-2025-7969: Markdown-it Fence Rendering XSS - Fito

TL;DR Markdown-it 14.1.0 contains an XSS vulnerability (CVE-2025-7969) that enables arbitrary JavaScript execution through a fence rendering bypass. This post provides a technical deep dive into the vulnerability, exploitation techniques, and real-world impact scenarios. Technical Analysis The Core Vulnerability The vulnerability exists in the library's fence rendering logic. Markdown-it uses a…