@540deg/react-native-simple-markdown (>=1.1.1, <=1.1.2), @anzeblabla/react-native-markdown-editor (>=1.0.3, <=2.1.1) +29 more potentially affected by CVE-2019-25103 via simple-markdown (>=0.0.9, <=0.4.4)

simple-markdown NPM version =0.0.9, =1.1.1, =1.0.3, =1.3.0, =1.0.1, =1.1.1, =1.1.74, =1.0.8, =1.0.4, =2.3.0, =3.0.0, =1.0.0, =0.1.0, =0.1.1 and more Source cves: CVE-2019-25103 Source advisory: OSV:GHSA-GPVJ-GP8C-C7P2...

CVE-2019-25103

The CVE-2019-25103 entry concerns the simple-markdown package, version 0.5.1, where an issue in an unknown function within simple-markdown.js leads to inefficient Regular Expression Denial of Service (ReDoS). The vulnerability can be exploited remotely. Remediation is available: upgrading to vers...