Headline
GHSA-mmh6-m7v9-5956: Regular expression denial of service in markdown-link-extractor
An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the markdown-link-extractor npm package, when an attacker is able to supply arbitrary input to the module’s exported function
Regular expression denial of service in markdown-link-extractor
Low severity GitHub Reviewed Published Jun 3, 2022 • Updated Jun 3, 2022
Related news
CVE-2021-43308: markdown-link-extractor ReDoS | XRAY-211350
An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the markdown-link-extractor npm package, when an attacker is able to supply arbitrary input to the module's exported function