Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-77004
HistoryJun 09, 2022 - 12:00 a.m.

npm markdown-link-extractor denial-of-service vulnerability

2022-06-0900:00:00
China National Vulnerability Database
www.cnvd.org.cn
12

0.001 Low

EPSS

Percentile

37.0%

npm markdown-link-extractor is used to extract links from Markdown text. npm markdown-link-extractor versions prior to 3.0.2 and 4.0.0 contain a denial of service vulnerability that stems from not properly handling incoming error messages, which could be exploited by an attacker to cause a denial of service in the application. exploit this vulnerability to cause a denial of service of the application.

0.001 Low

EPSS

Percentile

37.0%