Description
An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the markdown-link-extractor npm package, when an attacker is able to supply arbitrary input to the module's exported function
Remediation
References
https://research.jfrog.com/vulnerabilities/markdown-link-extractor-redos-xray-211350/
Related Vulnerabilities
CVE-2022-29631 Vulnerability in maven package org.jodd:jodd-http
CVE-2023-47325 Vulnerability in maven package org.silverpeas.core:silverpeas-core-web
CVE-2021-3664 Vulnerability in npm package url-parse
CVE-2020-36048 Vulnerability in npm package engine.io
CVE-2022-25940 Vulnerability in maven package org.webjars.npm:lite-server