tcort/markdown-link-extractor · Security
Regular expression denial of service in markdown-link-extractor
- GHSA ID
- GHSA-mmh6-m7v9-5956
- CVE ID
- CVE-2021-43308
- Severity
- low
- Published
- Updated
Description
An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the markdown-link-extractor npm package, when an attacker is able to supply arbitrary input to the module's exported function
CWEs
- CWE-1333 · Inefficient Regular Expression Complexity