Lucene search

K
osvGoogleOSV:GHSA-JR9P-R423-9M2R
HistoryJun 02, 2021 - 9:44 p.m.

markdown2 Regular Expression Denial of Service

2021-06-0221:44:28
Google
osv.dev
11
markdown2
software
vulnerability
regular expression
denial of service

EPSS

0.003

Percentile

69.8%

markdown2 >=1.0.1.18, fixed in 2.4.0, is affected by a regular expression denial of service vulnerability. If an attacker provides a malicious string, it can make markdown2 processing difficult or delayed for an extended period of time.