Submeter #598875: codemirror codemirror5 <=5.17.0 Inefficient Regular Expression Complexityinformação

Títulocodemirror codemirror5 <=5.17.0 Inefficient Regular Expression Complexity
DescriçãoA ReDoS vulnerability has been identified in CodeMirror’s Markdown mode. Specially crafted input strings can trigger catastrophic backtracking in several regular expressions, causing the affected application to freeze or significantly degrade its performance. This vulnerability could be exploited in any environment (browser‐ or server‑side) that utilizes CodeMirror’s Markdown mode, leading to denial‑of‑service (DoS).
Fonte⚠️ https://github.com/codemirror/codemirror5/issues/7128
Utilizador
 DayShift (UID 80963)
Submissão18/06/2025 08h39 (há 10 meses)
Moderação22/06/2025 08h17 (4 days later)
EstadoAceite
Entrada VulDB313610 [CodeMirror até 5.65.20 Markdown Mode markdown.js Negação de Serviço]
Pontos19

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!