Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:35845
HistoryJun 03, 2022 - 5:29 a.m.

Regular Expression Denial Of Service (ReDoS)

2022-06-0305:29:49
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13
regular expression denial of service
vulnerable software
insecure regex pattern

EPSS

0.001

Percentile

36.8%

markdown-link-extractor is vulnerable to regular expression denial of service. An attacker can crash the application by providing malicious input to the module.exports function of index.js due to the insecure regex pattern used for the image parameter.

EPSS

0.001

Percentile

36.8%

Related for VERACODE:35845