Lucene search
+L
Scrapbox-parser ProjectScrapbox-parser

1 matches found

CVE
CVE
added 2021/02/19 4:3 a.m.92 views

CVE-2021-27405

CVE-2021-27405 affects the Node.js package "@progfay/scrapbox-parser" before version 6.0.3 (also 7.0.2 in some advisories). The root cause is a Regular Expression Denial of Service (ReDoS) in DecorationNode, StrongNode and ExternalLinkNode that can be triggered by crafted input, causing high CPU ...

7.5CVSS7.4AI score0.01759EPSS
Save