Lucene search

K
osvGoogleOSV:GHSA-MMH6-M7V9-5956
HistoryJun 03, 2022 - 12:01 a.m.

Regular expression denial of service in markdown-link-extractor

2022-06-0300:01:00
Google
osv.dev
14
exponential redos markdown-link-extractor arbitrary input software

EPSS

0.001

Percentile

36.8%

An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the markdown-link-extractor npm package, when an attacker is able to supply arbitrary input to the module’s exported function

EPSS

0.001

Percentile

36.8%

Related for OSV:GHSA-MMH6-M7V9-5956