Markdown-link-extractor Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Markdown-link-extractor Project records in CISA KEV

No Markdown-link-extractor Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Markdown-link-extractor 1 record LOW

Records

1 record

TI-2021-19301 CVE-2021-43308 · GHSA-mmh6-m7v9-5956

Exponential ReDoS in markdown-link-extractor

LOW 35

An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the markdown-link-extractor npm package, when an attacker is able to supply arbitrary input to the module's exported function

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01097 Published 2022-06-01 Fixed in 3.0.2, 4.0.1 CWE-1333

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0