EUVD-2026-89484

anchorme through 3.0.8 contains a regular expression denial of service vulnerability in the IPv6 host extraction regex due to catastrophic backtracking. Attackers can supply specially crafted input strings with repeated patterns to cause exponential regex engine backtracking, blocking the Node.js...

CVE-2026-103043

anchorme through 3.0.8 contains a regular expression denial of service vulnerability in the IPv6 host extraction regex due to catastrophic backtracking. Attackers can supply specially crafted input strings with repeated patterns to cause exponential regex engine backtracking, blocking the Node.js...

CVE-2026-103043 anchorme through 3.0.8 Regular Expression Denial of Service

anchorme through 3.0.8 contains a regular expression denial of service vulnerability in the IPv6 host extraction regex due to catastrophic backtracking. Attackers can supply specially crafted input strings with repeated patterns to cause exponential regex engine backtracking, blocking the Node.js...

CVE-2026-103043 anchorme through 3.0.8 Regular Expression Denial of Service

anchorme through 3.0.8 contains a regular expression denial of service vulnerability in the IPv6 host extraction regex due to catastrophic backtracking. Attackers can supply specially crafted input strings with repeated patterns to cause exponential regex engine backtracking, blocking the Node.js...

CVE-2026-103043

The anchorme library (versions through 3.0.8 ) is vulnerable to a Regular Expression Denial of Service (ReDoS) . The issue resides in the IPv6 host extraction regex , where catastrophic backtracking can be triggered by specially crafted input strings with repeated patterns. This causes exponentia...

PT-2026-102938

Name of the Vulnerable Software and Affected Versions anchorme versions prior to 3.0.9 Description A regular expression denial of service occurs in the IPv6 host extraction regex due to catastrophic backtracking, which happens when a regex engine takes an exponential amount of time to process a...

CVE-2026-103043: Inefficient Regular Expression Complexity

anchorme through 3.0.8 contains a regular expression denial of service vulnerability in the IPv6 host extraction regex due to catastrophic backtracking. Attackers can supply specially crafted input strings with repeated patterns to cause exponential regex engine backtracking, blocking the Node.js...

AnchorMe Cross-Site Scripting Vulnerability

AnchorMe is an extension that manually records where the current page is being read.AnchorMe has a cross-site scripting vulnerability, and no details of the vulnerability are currently available...

Cross-site scripting in anchorme

All versions of package anchorme are vulnerable to Cross-site Scripting XSS via the main functionality...

@antlerengineering/components (>=2.4.0, <=2.10.3), @antlerengineering/form-builder (>=2.1.7, <=2.4.1) +42 more potentially affected by CVE-2021-23411 via anchorme (2.1.2)

anchorme NPM version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on anchorme and may be impacted: - @antlerengineering/components =2.4.0, =2.1.7, =2.10.4, =0.0.1, =2.1.0-rc1, =0.0.1, =0.6.6, =1.1.12, =1.2.7, =1.0.628, =0.1.0, =0.1.1, =0.1.0,...

GHSA-W4WQ-RVMQ-77X7 Cross-site scripting in anchorme

All versions of package anchorme are vulnerable to Cross-site Scripting XSS via the main functionality...

PT-2021-15501

Name of the Vulnerable Software and Affected Versions anchorme versions prior to the fixed version Description The issue concerns Cross-site Scripting XSS via the main functionality of the package. It accepts input that can result in the output, an anchor a tag, containing undesirable Javascript...

AnchorMe 跨站脚本漏洞

AnchorMe is an extension that manually records where the current page is being read.AnchorMe has a cross-site scripting vulnerability, and no details of the vulnerability are currently available...

@antlerengineering/components (>=2.4.0, <=2.10.3), @antlerengineering/form-builder (>=2.1.7, <=2.4.1) +79 more potentially affected by CVE-2021-23411 via anchorme (>=0.7.2, <=3.0.8)

anchorme NPM version =0.7.2, =2.4.0, =2.1.7, =2.10.4, =0.2.2, =0.2.2, =0.6.22, =0.0.1, =2.1.0-rc1, =0.0.1, =12.4.0, =0.7.11, =0.6.100, =0.6.100, =0.6.6, =1.1.9, =1.1.14 and more Source cves: CVE-2021-23411 Source advisory: SNYK:JS-ANCHORME-1311008...

Cross-site Scripting (XSS)

Overview anchorme is an A library to convert URLs to a clickable HTML anchor elements Affected versions of this package are vulnerable to Cross-site Scripting XSS via the main functionality. It accepts input that can result in the output an anchor a tag containing undesirable Javascript code that...