Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
githubGitHub Advisory DatabaseGHSA-JR9P-R423-9M2R
HistoryJun 02, 2021 - 9:44 p.m.

markdown2 Regular Expression Denial of Service

2021-06-0221:44:28
CWE-1333
GitHub Advisory Database
github.com
43

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.003 Low

EPSS

Percentile

69.5%

JSON

markdown2 >=1.0.1.18, fixed in 2.4.0, is affected by a regular expression denial of service vulnerability. If an attacker provides a malicious string, it can make markdown2 processing difficult or delayed for an extended period of time.

CPENameOperatorVersion
markdown2ge1.0.1.18
markdown2lt2.4.0

Related

ubuntucve 1
openvas 4
debiancve 1
suse 2
nessus 2
fedora 3
osv 3
veracode 1
prion 1
freebsd 1
cve 1
kitploit 1
ubuntucve
ubuntucve
CVE-2021-26813
2021-03-03 00:00:00
openvas
openvas
Fedora: Security Advisory for python-markdown2 (FEDORA-2021-0337384e41)
2021-05-13 00:00:00
openSUSE: Security Advisory for python-markdown2 (openSUSE-SU-2021:0429-1)
2021-04-16 00:00:00
Fedora: Security Advisory for python-markdown2 (FEDORA-2021-e235a0da4a)
2021-05-13 00:00:00
debiancve
debiancve
CVE-2021-26813
2021-03-03 16:15:00
suse
suse
Security update for python-markdown2 (moderate)
2021-03-16 00:00:00
Security update for python-markdown2 (moderate)
2021-03-20 00:00:00
nessus
nessus
openSUSE Security Update : python-markdown2 (openSUSE-2021-429)
2021-03-17 00:00:00
FreeBSD : py-markdown2 -- regular expression denial of service vulnerability (c9b3324f-8e03-4ae3-89ce-8098cdc5bfa9)
2023-08-31 00:00:00
fedora
fedora
[SECURITY] Fedora 33 Update: python-markdown2-2.4.0-1.fc33
2021-05-10 01:08:51
[SECURITY] Fedora 32 Update: python-markdown2-2.4.0-1.fc32
2021-05-10 00:52:56
[SECURITY] Fedora 34 Update: python-markdown2-2.4.0-1.fc34
2021-05-10 01:07:00
osv
osv
PYSEC-2021-20
2021-03-03 16:15:00
markdown2 Regular Expression Denial of Service
2021-06-02 21:44:28
CVE-2021-26813
2021-03-03 16:15:13
veracode
veracode
Regular Expression Denial Of Service (ReDoS)
2021-03-04 04:44:25
prion
prion
Design/Logic Flaw
2021-03-03 16:15:00
freebsd
freebsd
py-markdown2 -- regular expression denial of service vulnerability
2021-03-03 00:00:00
cve
cve
CVE-2021-26813
2021-03-03 16:15:00
kitploit
kitploit
Regexploit - Find Regular Expressions Which Are Vulnerable To ReDoS (Regular Expression Denial Of Service)
2021-07-20 12:30:00

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.003 Low

EPSS

Percentile

69.5%

JSON
Related for GHSA-JR9P-R423-9M2R
ubuntucve1openvas4debiancve1suse2nessus2fedora3osv3veracode1prion1freebsd1cve1kitploit1