← CVE Intelligence

CVE-2021-43308

Exponential ReDoS in markdown-link-extractor PUBLISHED

Description (CNA)

An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the markdown-link-extractor npm package, when an attacker is able to supply arbitrary input to the module's exported function

Affected (CNA)

Vendor / productVersions
markdown-link-extractor / markdown-link-extractoraffected unspecified before 3.0.2

CWE

CWE-1333

References

ADP enrichment

CVE

No English description supplied.