CVE-2019-25103
1 advisory.
npm/simple-markdown CVE-2019-25103: high 7.5, EPSS 0.94%
Regular Expression Denial of Service in simple-markdown
Action: Upgrade simple-markdown to 0.5.2 or later.
npm i simple-markdown@0.5.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.5.2 | - |
Fixed versions
| 0.5.2 |
Sources
- osv: GHSA-gpvj-gp8c-c7p2
- https://nvd.nist.gov/vuln/detail/CVE-2019-25103
- https://github.com/Khan/simple-markdown/issues/71
- https://github.com/ariabuckles/simple-markdown/commit/89797fef9abb4cab2fb76a335968266a92588816
- https://github.com/ariabuckles/simple-markdown
- https://github.com/ariabuckles/simple-markdown/releases/tag/0.5.2
- https://snyk.io/vuln/SNYK-JS-SIMPLEMARKDOWN-460540
- https://vuldb.com/?ctiid.220639
- https://vuldb.com/?id.220639
CVE-2019-25103 · published · modified · JSON