Description
The jadedown package is affected by a regular expression denial of service vulnerability when certain types of user input are passed in.
Recommendation
No fix is available yet. Followings are affected versions:
- <= 0.0.3
References
Related Issues
- Regular Expression Denial of Service in hawk - CVE-2016-2515
- Regular Expression Denial of Service in riot-compiler - CVE-2016-10527
- Regular Expression Denial of Service in moment - moment - CVE-2016-4055
- Regular Expression Denial of Service in browserslist - CVE-2021-23364
You might also like:
- Tags:
- npm
- jadedown
Anything's wrong? Let us know Last updated on September 11, 2023