TI-2019-15236 CVE-2019-25103 · GHSA-gpvj-gp8c-c7p2
simple-markdown simple-markdown.js redos
Priority LOW 35
A vulnerability has been found in simple-markdown 0.5.1 and classified as problematic.
Khanacademy
Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
Khanacademy records in CISA KEVNo Khanacademy vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
3 records
TI-2019-15235 CVE-2019-25102 · GHSA-j533-2g8v-pmpg
simple-markdown simple-markdown.js redos
Priority LOW 35
A vulnerability, which was classified as problematic, was found in simple-markdown 0.6.0.
TI-2019-07226 CVE-2019-9844 · GHSA-qj3f-9gmq-fwv5
simple-markdown.js in Khan Academy simple-markdown before 0.4.4 allows XSS via a data: or vbscript: URI.
Priority LOW 30
simple-markdown.js in Khan Academy simple-markdown before 0.4.4 allows XSS via a data: or vbscript: URI.