Enviar #598875: codemirror codemirror5 <=5.17.0 Inefficient Regular Expression Complexityinformación

Títulocodemirror codemirror5 <=5.17.0 Inefficient Regular Expression Complexity
DescripciónA ReDoS vulnerability has been identified in CodeMirror’s Markdown mode. Specially crafted input strings can trigger catastrophic backtracking in several regular expressions, causing the affected application to freeze or significantly degrade its performance. This vulnerability could be exploited in any environment (browser‐ or server‑side) that utilizes CodeMirror’s Markdown mode, leading to denial‑of‑service (DoS).
Fuente⚠️ https://github.com/codemirror/codemirror5/issues/7128
Usuario
 DayShift (UID 80963)
Sumisión2025-06-18 08:39 (hace 1 Año)
Moderación2025-06-22 08:17 (4 days later)
EstadoAceptado
Entrada de VulDB313610 [CodeMirror hasta 5.65.20 Markdown Mode markdown.js denegación de servicio]
Puntos19

Do you want to use VulDB in your project?

Use the official API to access entries easily!