Description
A ReDoS (regular expression denial of service) flaw was found in the @progfay/scrapbox-parser package before 6.0.3 for Node.js.
Remediation
References
https://github.com/progfay/scrapbox-parser/pull/540
https://github.com/progfay/scrapbox-parser/pull/539
https://github.com/progfay/scrapbox-parser/pull/519
https://security.netapp.com/advisory/ntap-20210326-0002/
Related Vulnerabilities
CVE-2023-2968 Vulnerability in npm package proxy
CVE-2017-2601 Vulnerability in maven package org.jenkins-ci.main:jenkins-core
CVE-2015-7559 Vulnerability in maven package org.apache.activemq:activemq-all
CVE-2022-36007 Vulnerability in maven package com.github.jlangch:venice
CVE-2021-29506 Vulnerability in maven package com.graphhopper:graphhopper-nav