Description

jadedown is vulnerable to regular expression denial of service (ReDoS) when certain types of user input is passed in.

Remediation

References

https://nodesecurity.io/advisories/52

Related Vulnerabilities

CVE-2020-7676 Vulnerability in npm package angular

CVE-2017-18077 Vulnerability in maven package org.webjars.npm:brace-expansion

CVE-2023-0842 Vulnerability in npm package xml2js

CVE-2022-21676 Vulnerability in npm package engine.io

CVE-2017-16164 Vulnerability in npm package desafio

Severity

High

Classification

CWE-20 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Exploit Third Party Advisory