CVE-2021-21254
1 advisory.
npm/@ckeditor/ckeditor5-markdown-gfm CVE-2021-21254: medium 6.5, EPSS 1.79%
CKEditor 5 Markdown plugin Regular expression Denial of Service
Action: Upgrade @ckeditor/ckeditor5-markdown-gfm to 25.0.0 or later.
npm i @ckeditor/ckeditor5-markdown-gfm@25.0.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 25.0.0 | - |
Fixed versions
| 25.0.0 |
Sources
- osv: GHSA-hgmg-hhc8-g5wr
- https://github.com/ckeditor/ckeditor5/security/advisories/GHSA-hgmg-hhc8-g5wr
- https://nvd.nist.gov/vuln/detail/CVE-2021-21254
- https://github.com/ckeditor/ckeditor5
- https://github.com/ckeditor/ckeditor5/releases/tag/v25.0.0
- https://www.npmjs.com/package/@ckeditor/ckeditor5-markdown-gfm
CVE-2021-21254 · published · modified · JSON