CVE-2019-25103

The CVE-2019-25103 entry concerns the simple-markdown package, version 0.5.1, where an issue in an unknown function within simple-markdown.js leads to inefficient Regular Expression Denial of Service (ReDoS). The vulnerability can be exploited remotely. Remediation is available: upgrading to vers...

CVE-2019-9844

CVE-2019-9844 affects the Node package simple-markdown (Khan Academy’s simple-markdown) up to version 0.4.3. The vulnerability is a Cross‑Site Scripting (XSS) flaw caused by insufficient input sanitization in links, enabling execution of malicious JavaScript via data: or VBScript: URIs. The issue...

CVE-2019-25102

CVE-2019-25102 affects simple-markdown 0.6.0. Affected is an unknown function in simple-markdown.js where an input pattern like <<<<<<<<<