Regular Expression Denial of Service (ReDoS)

Overview markdown-it is a modern pluggable markdown parser. Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS via the inline HTML parsing rule in src/rulesinline/htmlinline.ts, where the HTMLTAGRE regular expression is applied against untrusted input. ...