Description
An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the markdown-link-extractor npm package, when an attacker is able to supply arbitrary input to the module's exported function
Remediation
References
https://research.jfrog.com/vulnerabilities/markdown-link-extractor-redos-xray-211350/
Related Vulnerabilities
CVE-2016-10707 Vulnerability in maven package org.webjars.bower:jquery
CVE-2018-18854 Vulnerability in maven package io.spray:spray-json_2.12
CVE-2019-19729 Vulnerability in npm package bson-objectid
CVE-2016-10735 Vulnerability in maven package com.loopeer.android:bootstrap
CVE-2023-39106 Vulnerability in maven package com.alibaba.nacos:nacos-spring-context