| 标题 | codemirror codemirror5 <=5.17.0 Inefficient Regular Expression Complexity |
|---|
| 描述 | A ReDoS vulnerability has been identified in CodeMirror’s Markdown mode. Specially crafted input strings can trigger catastrophic backtracking in several regular expressions, causing the affected application to freeze or significantly degrade its performance. This vulnerability could be exploited in any environment (browser‐ or server‑side) that utilizes CodeMirror’s Markdown mode, leading to denial‑of‑service (DoS). |
|---|
| 来源 | ⚠️ https://github.com/codemirror/codemirror5/issues/7128 |
|---|
| 用户 | DayShift (UID 80963) |
|---|
| 提交 | 2025-06-18 08時39分 (1 年前) |
|---|
| 管理 | 2025-06-22 08時17分 (4 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 313610 [CodeMirror 直到 5.65.20 Markdown Mode markdown.js 拒绝服务] |
|---|
| 积分 | 19 |
|---|