Regular Expression Denial of Service

Overview

Impact

@progfay/scrapbox-parser before 6.0.3 and 7.0.2 are vulnerable to Regular Expression Denial of Service (ReDoS) in DecorationNode, StrongNode and ExternalLinkNode.
An attacker may be able to craft text which causes the application to consume an excessive amount of CPU.

Recommendation

Upgrade to version 6.0.3, or 7.0.2, or later

References

• Snyk Advisory
• GitHub Advisory
• CVE