| Название | codemirror codemirror5 <=5.17.0 Inefficient Regular Expression Complexity |
|---|
| Описание | A ReDoS vulnerability has been identified in CodeMirror’s Markdown mode. Specially crafted input strings can trigger catastrophic backtracking in several regular expressions, causing the affected application to freeze or significantly degrade its performance. This vulnerability could be exploited in any environment (browser‐ or server‑side) that utilizes CodeMirror’s Markdown mode, leading to denial‑of‑service (DoS). |
|---|
| Источник | ⚠️ https://github.com/codemirror/codemirror5/issues/7128 |
|---|
| Пользователь | DayShift (UID 80963) |
|---|
| Представление | 18.06.2025 08:39 (10 месяцы назад) |
|---|
| Модерация | 22.06.2025 08:17 (4 days later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 313610 [CodeMirror до 5.65.20 Markdown Mode markdown.js отказ в обслуживании] |
|---|
| Баллы | 19 |
|---|