markdown-link-extractor is vulnerable to regular expression denial of service. An attacker can crash the application by providing malicious input to the module.exports
function of index.js
due to the insecure regex pattern used for the image
parameter.