Описание
markdown-it is a Markdown parser. Prior to version 1.3.2, special patterns with length greater than 50 thousand characterss could slow down the parser significantly. Users should upgrade to version 12.3.2 to receive a patch. There are no known workarounds aside from upgrading.
Ссылки
- PatchThird Party Advisory
- ExploitThird Party Advisory
- PatchThird Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 12.3.1 (включая)
cpe:2.3:a:markdown-it_project:markdown-it:*:*:*:*:*:*:*:*
EPSS
Процентиль: 78%
0.01114
Низкий
5.3 Medium
CVSS3
5 Medium
CVSS2
Дефекты
CWE-400
CWE-1333
Связанные уязвимости
CVSS3: 5.3
ubuntu
около 4 лет назад
markdown-it is a Markdown parser. Prior to version 1.3.2, special patterns with length greater than 50 thousand characterss could slow down the parser significantly. Users should upgrade to version 12.3.2 to receive a patch. There are no known workarounds aside from upgrading.
CVSS3: 5.3
debian
около 4 лет назад
markdown-it is a Markdown parser. Prior to version 1.3.2, special patt ...
CVSS3: 5.3
github
около 4 лет назад
Uncontrolled Resource Consumption in markdown-it
EPSS
Процентиль: 78%
0.01114
Низкий
5.3 Medium
CVSS3
5 Medium
CVSS2
Дефекты
CWE-400
CWE-1333