Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/09/08 9:24 p.m.6 views

Tiptap: Quadratic ReDoS in block and inline Markdown attribute parsing

Summary @tiptap/core contains two quadratic regular-expression denial-of-service paths in its default Markdown attribute parsers. Pandoc-style block attributes use two unanchored greedy expressions that rescan repeated QUOTED0 prefixes. Inline shortcode attributes use another unanchored greedy ke...

5.8AI score
SaveExploits0References4Affected Software1
Rows per page
Query Builder