{"action":"Upgrade markdown-link-extractor to 3.0.2 or later.","affected":[{"fixed":"3.0.2","introduced":"0"},{"fixed":"4.0.1","introduced":"4.0.0"}],"component":"markdown-link-extractor","cve_ids":["CVE-2021-43308"],"ecosystem":"npm","epss":0.01097,"exploited":false,"fixed_versions":["3.0.2","4.0.1"],"ghsa_id":"GHSA-mmh6-m7v9-5956","id":"tcs_01M5KG134PC3GQB09F2WJKTXR9","modified_at":"2023-11-08T04:07:09.665423Z","published_at":"2022-06-03T00:01:00Z","references":["https://osv.dev/vulnerability/GHSA-mmh6-m7v9-5956","https://nvd.nist.gov/vuln/detail/CVE-2021-43308","https://github.com/tcort/markdown-link-extractor","https://research.jfrog.com/vulnerabilities/markdown-link-extractor-redos-xray-211350"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-mmh6-m7v9-5956","url":"https://osv.dev/vulnerability/GHSA-mmh6-m7v9-5956"}],"summary":"Regular expression denial of service in markdown-link-extractor"}