Description
An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the markdown-link-extractor npm package, when an attacker is able to supply arbitrary input to the module's exported function
Remediation
References
https://research.jfrog.com/vulnerabilities/markdown-link-extractor-redos-xray-211350/
Related Vulnerabilities
CVE-2020-36632 Vulnerability in npm package flat
CVE-2022-25948 Vulnerability in npm package liquidjs
CVE-2020-9480 Vulnerability in maven package org.apache.spark:spark-network-shuffle_2.11
CVE-2021-41038 Vulnerability in npm package @theia/plugin-ext
CVE-2020-19697 Vulnerability in maven package org.webjars.npm:editor.md