CVE-2025-42873 Denial of Service (DoS) in SAPUI5 framework (Markdown-it component)

SAPUI5 and OpenUI5 packages use outdated 3rd party libraries with known security vulnerabilities. When markdown-it encounters special malformed input, it fails to terminate properly, resulting in an infinite loop. This Denial of Service via infinite loop causes high CPU usage and system...

TencentOS Server 4: python-cmarkgfm (TSSA-2025:0086)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0086 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

EUVD-2018-2051

Malware in sbrugna...

EUVD-2018-0762

Malware in sbrugna...

EUVD-2017-3207

Malware in sbrugna...

EUVD-2024-39118

Malicious code in bioql PyPI...

EUVD-2021-28275

Malicious code in bioql PyPI...

EUVD-2024-35885

Malicious code in bioql PyPI...

EUVD-2022-1336

Malicious code in bioql PyPI...

EUVD-2022-0691

Malicious code in bioql PyPI...

EUVD-2022-0488

Malicious code in bioql PyPI...

EUVD-2025-23255

Malicious code in bioql PyPI...

EUVD-2023-0947

Malicious code in bioql PyPI...

EUVD-2023-0886

Malicious code in bioql PyPI...

EUVD-2022-0473

Malicious code in bioql PyPI...

Regular Expression Denial of Service (ReDoS)

Overview cattown is an A lightweight, pure JavaScript markdown parser with built-in HTML sanitization using DOMPurify. Converts markdown to clean, safe HTML with customizable styling. Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS via inefficient...

CVE-2025-58451

Cattown is a JavaScript markdown parser. Versions prior to 1.0.2 used regular expressions with inefficient, potentially exponential worst-case complexity. This could cause excessive CPU usage due to excessive backtracking on crafted inputs. In turn, the excessive CPU usage could lead to resource...

CVE-2025-58451

Cattown is a JavaScript markdown parser. Versions prior to 1.0.2 used regular expressions with inefficient, potentially exponential worst-case complexity. This could cause excessive CPU usage due to excessive backtracking on crafted inputs. In turn, the excessive CPU usage could lead to resource...

Cattown 安全漏洞

Cattown is a markdown file parser for IEatUranium238 individual developers. A security vulnerability exists in Cattown versions prior to 1.0.2 that stems from a denial of service attack with regular expressions...

PT-2025-36518

Name of the Vulnerable Software and Affected Versions: Cattown versions prior to 1.0.2 Description: Cattown is a JavaScript markdown parser susceptible to denial of service. The parser utilizes regular expressions with inefficient complexity, potentially leading to exponential worst-case...