Description
A ReDoS (regular expression denial of service) flaw was found in the @progfay/scrapbox-parser package before 6.0.3 for Node.js.
Remediation
References
https://github.com/progfay/scrapbox-parser/pull/519
https://github.com/progfay/scrapbox-parser/pull/539
https://github.com/progfay/scrapbox-parser/pull/540
https://security.netapp.com/advisory/ntap-20210326-0002/
Related Vulnerabilities
CVE-2021-23406 Vulnerability in npm package pac-resolver
CVE-2021-35513 Vulnerability in maven package org.webjars.npm:mermaid
CVE-2020-15135 Vulnerability in npm package save-server
CVE-2021-20218 Vulnerability in maven package io.fabric8:kubernetes-client
CVE-2023-22457 Vulnerability in maven package org.xwiki.contrib:application-ckeditor-ui