{"action":"Upgrade simple-markdown to 0.5.2 or later.","affected":[{"fixed":"0.5.2","introduced":"0"}],"component":"simple-markdown","cve_ids":["CVE-2019-25103"],"ecosystem":"npm","epss":0.0094,"exploited":false,"fixed_versions":["0.5.2"],"ghsa_id":"GHSA-gpvj-gp8c-c7p2","id":"tcs_01M5KFS7ZM67ENK1B1XZTVJ50N","modified_at":"2026-02-22T23:19:31.141696Z","published_at":"2023-02-12T15:30:24Z","references":["https://osv.dev/vulnerability/GHSA-gpvj-gp8c-c7p2","https://nvd.nist.gov/vuln/detail/CVE-2019-25103","https://github.com/Khan/simple-markdown/issues/71","https://github.com/ariabuckles/simple-markdown/commit/89797fef9abb4cab2fb76a335968266a92588816","https://github.com/ariabuckles/simple-markdown","https://github.com/ariabuckles/simple-markdown/releases/tag/0.5.2","https://snyk.io/vuln/SNYK-JS-SIMPLEMARKDOWN-460540","https://vuldb.com/?ctiid.220639","https://vuldb.com/?id.220639"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-gpvj-gp8c-c7p2","url":"https://osv.dev/vulnerability/GHSA-gpvj-gp8c-c7p2"}],"summary":"Regular Expression Denial of Service in simple-markdown"}