8 matches found
CVE-2020-26307
HTML2Markdown is a Javascript implementation for converting HTML to Markdown text. All available versions contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service ReDoS. As of time of publication, no known patches are available...
CVE-2020-26307 GHSL-2020-301: Regular Expression Denial of Service (ReDoS) in HTML2Markdown
HTML2Markdown is a Javascript implementation for converting HTML to Markdown text. All available versions contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service ReDoS. As of time of publication, no known patches are available...
CVE-2020-26307 GHSL-2020-301: Regular Expression Denial of Service (ReDoS) in HTML2Markdown
HTML2Markdown is a Javascript implementation for converting HTML to Markdown text. All available versions contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service ReDoS. As of time of publication, no known patches are available...
@ryan-liu/wechat-to-markdown (1.1.0), cooltree (>=1.0.36, <=1.0.43) +5 more potentially affected by CVE-2020-26307 via html2markdown (1.1.0)
html2markdown NPM version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on html2markdown and may be impacted: - @ryan-liu/wechat-to-markdown 1.1.0 - cooltree =1.0.36, =0.0.1, =0.0.1, =1.0.0, =0.0.2, =0.1.0, =1.0.2 Source cves: CVE-2020-26307 Sourc...
CVE-2020-26307
HTML2Markdown (JavaScript) is vulnerable to Regular Expression Denial of Service (ReDoS) across all versions. The root cause is improperly crafted regular expressions used during HTML to Markdown conversion. As of publication, there are no patches available. Connected sources corroborate a ReDoS ...
CVE-2020-26307
HTML2Markdown is a Javascript implementation for converting HTML to Markdown text. All available versions contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service ReDoS. As of time of publication, no known patches are available...
HTML2Markdown security vulnerabilities
HTML2Markdown is a Javascript implementation for converting HTML to Markdown text by the individual developer Kates Gasis. A security vulnerability exists in HTML2Markdown due to the inclusion of one or more regular expressions that are vulnerable to a regular expression denial of service attack...
CVE-2020-26307: Inefficient Regular Expression Complexity
HTML2Markdown is a Javascript implementation for converting HTML to Markdown text. All available versions contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service ReDoS. As of time of publication, no known patches are available...