Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:39312
HistoryFeb 17, 2023 - 5:58 a.m.

Regular Expression Denial Of Service (ReDoS)

2023-02-1705:58:07
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
simple-markdown
vulnerability
redos
parsing
software

EPSS

0.001

Percentile

51.2%

simple-markdown is vulnerable to Regular Expression Denial Of Service (ReDoS). The vulnerability exists in simple-markdown.js because of insufficient regular expression complexity which allows an attacker to cause long parsing times.

EPSS

0.001

Percentile

51.2%

Related for VERACODE:39312