All the vulnerabilities related to the version 4.1.2 of the package
Denial of Service in markdown-it-toc-and-anchor
All versions of markdown-it-toc-and-anchor are vulnerable to Denial of Service. Parsing markdown containing **text**+\n@[toc] causes the application to enter and infinite loop.
No fix is currently available. Consider using an alternative module until a fix is made available.