UNKNOWN npm
Regular Expression Denial of Service
GHSA-7m7q-q53v-j47v
Published · Modified
Description
A flaw was found in nodejs-marked versions from 0.5.0 to before 0.6.1. Affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS). Input to the host variable is vulnerable when input contains parenthesis in link URIs, coupled with a high number of link tokens in a single line.
Ready to move
Start Securing
Free, no credit card | First findings in minutes