CVE-2024-1899 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

CVE-2024-1899

An issue in the anchors subparser of Showdownjs versions = 2.1.0 could allow a remote attacker to cause denial of service conditions...

Security Bulletin: IBM Fusion HCI and IBM Fusion are vulnerable to denial of service due to Node.js, isaacs node-tar, ShowdownJS

Summary IBM Fusion HCI and IBM Fusion's graphical user interface are vulnerable to a denial of service due to Node.js, isaacs node-tar, and ShowdownJS. CVE-2024-4068, CVE-2024-28863, CVE-2024-1899. Vulnerability Details CVEID:CVE-2024-4068 DESCRIPTION: Node.js braces module is vulnerable to a...

3dmol (>=2.0.4, <=2.0.5), 6_modulojs (1.0.0) +770 more potentially affected by CVE-2024-1899 via showdown (>=2.0.1, <=2.1.0)

showdown NPM version =2.0.1, =2.0.4, =13.351.0, =13.351.0, =7.10.0, =7.10.0, =0.0.3, =0.0.1, =0.0.1-alpha.10, =5.2.20, =0.0.28, =3.1.0 and more Source cves: CVE-2024-1899 Source advisory: GHSA-RMMH-P597-PPVV...

3dmol (>=2.0.4, <=2.0.5), 6_modulojs (1.0.0) +770 more potentially affected by CVE-2024-1899 via showdown (>=2.0.1, <=2.1.0)

showdown NPM version =2.0.1, =2.0.4, =13.351.0, =13.351.0, =7.10.0, =7.10.0, =0.0.3, =0.0.1, =0.0.1-alpha.10, =5.2.20, =0.0.28, =3.1.0 and more Source cves: CVE-2024-1899 Source advisory: OSV:GHSA-RMMH-P597-PPVV...

CVE-2024-1899

CVE-2024-1899 affects ShowdownJS (the anchors subparser) where versions

CVE-2024-1899 Showdownjs Denial of Service

An issue in the anchors subparser of Showdownjs versions = 2.1.0 could allow a remote attacker to cause denial of service conditions...

org.webjars.bower:ng-swagger-ui (0.0.4) potentially affected by CVE-2024-1899 via org.webjars.bower:showdown (1.7.6)

org.webjars.bower:showdown MAVEN version 1.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.bower:showdown and may be impacted: - org.webjars.bower:ng-swagger-ui 0.0.4 Source cves: CVE-2024-1899 Source advisory:...

org.webjars:angular-markdown-directive (0.3.0) potentially affected by CVE-2024-1899 via org.webjars:showdown (0.3.1)

org.webjars:showdown MAVEN version 0.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars:showdown and may be impacted: - org.webjars:angular-markdown-directive 0.3.0 Source cves: CVE-2024-1899 Source advisory: SNYK:JAVA-ORGWEBJARS-8685134...

com.github.linyuzai:concept-plugin-spring-boot-starter (>=2.0.0, <=3.0.0), org.webjars.npm:github-com-showdownjs-ng-showdown (1.1.0) +3 more potentially affected by CVE-2024-1899 via org.webjars.npm:showdown (>=1.9.1, <=2.1.0)

org.webjars.npm:showdown MAVEN version =1.9.1, =2.0.0, =1.0.2, =1.0.3 - org.webjars.npm:showdown-prism 0.2.0 Source cves: CVE-2024-1899 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-8685132...