From 416cc99fa4ce6cfacd7746e193b2fc878a21859b Mon Sep 17 00:00:00 2001
From: "cycode-security[bot]"
 <54410473+cycode-security[bot]@users.noreply.github.com>
Date: Sun, 10 May 2026 02:37:26 +0000
Subject: [PATCH] [Cycode] Fix for vulnerable manifest file dependency -
 markdown-it updated to version 12.3.2

---
 ctfd/data/CTFd/package.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ctfd/data/CTFd/package.json b/ctfd/data/CTFd/package.json
index 2b8390783..4e28aff21 100644
--- a/ctfd/data/CTFd/package.json
+++ b/ctfd/data/CTFd/package.json
@@ -41,7 +41,7 @@
     "highlight.js": "^10.4.1",
     "howler": "~2.1.2",
     "jquery": "~3.5.1",
-    "markdown-it": "~10.0.0",
+    "markdown-it": "~12.3.2",
     "mini-css-extract-plugin": "~0.7.0",
     "node-sass": "^4.12.0",
     "nunjucks": "~3.2.0",