Description
The jadedown package is affected by a regular expression denial of service vulnerability when certain types of user input are passed in.
Recommendation
No fix is available yet. Followings are affected versions:
- <= 0.0.3
References
Related Issues
- Regular Expression Denial of Service in moment - moment - CVE-2016-4055
- is_js vulnerable to Regular Expression Denial of Service - CVE-2020-26302
- Regular Expression Denial of Service in dat.gui - CVE-2020-7755
- Regular Expression Denial of Service in Headers - CVE-2023-24807
You might also like:
- Tags:
- npm
- jadedown
Anything's wrong? Let us know Last updated on September 11, 2023