Description
A ReDoS (regular expression denial of service) flaw was found in the @progfay/scrapbox-parser package before 6.0.3 for Node.js.
Remediation
References
https://github.com/progfay/scrapbox-parser/pull/519
https://github.com/progfay/scrapbox-parser/pull/539
https://github.com/progfay/scrapbox-parser/pull/540
https://security.netapp.com/advisory/ntap-20210326-0002/
Related Vulnerabilities
CVE-2023-45133 Vulnerability in npm package @babel/traverse
CVE-2021-46708 Vulnerability in npm package swagger-ui-dist
CVE-2022-31198 Vulnerability in npm package @openzeppelin/contracts
CVE-2018-1999024 Vulnerability in npm package mathjax
CVE-2022-35942 Vulnerability in npm package loopback-connector-postgresql