Lucene search
Veracode Vulnerability DatabaseVERACODE:29198HistoryFeb 01, 2021 - 10:51 a.m.
Regular Expression Denial Of Service (ReDoS)
2021-02-0110:51:29
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
0.001 Low
EPSS
Percentile
40.7%
@ckeditor/ckeditor5-markdown-gfm is vulnerable to regular expression denial of service. The vulnerability exists because of unescaped Urls in the DataProcessor.
| CPE | Name | Operator | Version |
|---|---|---|---|
| @ckeditor/ckeditor5-markdown-gfm | le | 24.0.0 | |
| @ckeditor/ckeditor5-markdown-gfm | le | 24.0.0 |
Related
osv
osv
CVE-2021-21254
2021-01-29 22:15:14
CKEditor 5 Markdown plugin Regular expression Denial of Service
2021-01-29 21:51:22
github
github
CKEditor 5 Markdown plugin Regular expression Denial of Service
2021-01-29 21:51:22
prion
prion
Design/Logic Flaw
2021-01-29 22:15:00
nvd
nvd
CVE-2021-21254
2021-01-29 22:15:14
cve
cve
CVE-2021-21254
2021-01-29 22:15:14
nodejs
nodejs
Regular Expression Denial of Service
2021-02-23 01:44:40
cvelist
cvelist
CVE-2021-21254 Regular expression Denial of Service in Markdown plugin
2021-01-29 21:55:14