A vulnerability, which was classified as problematic, has been found in syntax-tree mdast-util-to-hast up to 13.2.0. Impacted is an unknown function of the component Markdown Code Handler. This manipulation causes injection.

This vulnerability appears as CVE-2025-66400. The attack may be initiated remotely. There is no available exploit.

It is advisable to upgrade the affected component.