CVE-2024-1899
1 advisory.
npm/showdown CVE-2024-1899: medium 5.3
Showdown vulnerable to Regular Expression Denial of Service (ReDoS) in link/anchor parsing
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 2.1.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-rmmh-p597-ppvv
- https://nvd.nist.gov/vuln/detail/CVE-2024-1899
- https://github.com/showdownjs/showdown
- https://www.tenable.com/security/research/tra-2024-05
CVE-2024-1899 · published · modified · JSON