Lucene search

K
osvGoogleOSV:CVE-2021-43308
HistoryJun 02, 2022 - 2:15 p.m.

CVE-2021-43308

2022-06-0214:15:31
Google
osv.dev
9
cve-2021-43308
regular expression denial of service
markdown-link-extractor
arbitrary input
software

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

36.8%

An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the markdown-link-extractor npm package, when an attacker is able to supply arbitrary input to the module’s exported function

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

36.8%