提出 #598875: codemirror codemirror5 <=5.17.0 Inefficient Regular Expression Complexity情報

タイトルcodemirror codemirror5 <=5.17.0 Inefficient Regular Expression Complexity
説明A ReDoS vulnerability has been identified in CodeMirror’s Markdown mode. Specially crafted input strings can trigger catastrophic backtracking in several regular expressions, causing the affected application to freeze or significantly degrade its performance. This vulnerability could be exploited in any environment (browser‐ or server‑side) that utilizes CodeMirror’s Markdown mode, leading to denial‑of‑service (DoS).
ソース⚠️ https://github.com/codemirror/codemirror5/issues/7128
ユーザー
 DayShift (UID 80963)
送信2025年06月18日 08:39 (10 月 ago)
モデレーション2025年06月22日 08:17 (4 days later)
ステータス承諾済み
VulDBエントリ313610 [CodeMirror 迄 5.65.20 Markdown Mode markdown.js サービス拒否]
ポイント19

Interested in the pricing of exploits?

See the underground prices here!