{"action":"Upgrade simple-markdown to 0.6.1 or later.","affected":[{"fixed":"0.6.1","introduced":"0"}],"component":"simple-markdown","cve_ids":["CVE-2019-25102"],"ecosystem":"npm","epss":0.01097,"exploited":false,"fixed_versions":["0.6.1"],"ghsa_id":"GHSA-j533-2g8v-pmpg","id":"tcs_01M5KFWZWDQM0XSY44ZNV8FQX1","modified_at":"2023-11-08T04:01:33.550945Z","published_at":"2023-02-12T15:30:25Z","references":["https://osv.dev/vulnerability/GHSA-j533-2g8v-pmpg","https://nvd.nist.gov/vuln/detail/CVE-2019-25102","https://github.com/ariabuckles/simple-markdown/pull/73","https://github.com/ariabuckles/simple-markdown/commit/015a719bf5cdc561feea05500ecb3274ef609cd2","https://github.com/ariabuckles/simple-markdown","https://github.com/ariabuckles/simple-markdown/releases/tag/0.6.1","https://vuldb.com/?ctiid.220638","https://vuldb.com/?id.220638"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-j533-2g8v-pmpg","url":"https://osv.dev/vulnerability/GHSA-j533-2g8v-pmpg"}],"summary":"Regular Expression Denial of Service in simple-markdown"}