Ltduc147

**Name of the Vulnerable Software and Affected Versions** markdown-it versions 13.0.0 through 14.1.0 **Description** The software is susceptible to a Regular Expression Denial of Service (ReDoS) condition. This occurs due to the use of the regular expression `/*+$/` within the `linkify` function. An attacker can provide a specially crafted input consisting of a long sequence of `*` characters followed by a non-matching character. This input causes excessive backtracking in the regular expression engine, potentially leading to a denial-of-service condition. The `linkify` function is the component responsible for processing the input. The `*` character is used as part of the vulnerable regular expression. **Recommendations** Update to a version later than 14.1.0.

**Name of the Vulnerable Software and Affected Versions** AutoGPT versions prior to 0.6.32 **Description** AutoGPT is a platform for creating, deploying, and managing continuous artificial intelligence agents that automate complex workflows. Versions of AutoGPT before 0.6.32 contain a Regular Expression Denial of Service issue due to the use of regular expressions in the Code Extraction Block. Specifically, the regular expressions `s+[sS]*?` and `s+(.*?)` are vulnerable. These expressions contain adjacent quantifiers that can match the same space character (`s`), allowing an attacker to provide a long sequence of space characters to trigger excessive regex backtracking, potentially leading to a Denial of Service (DoS). **Recommendations** Update to version 0.6.32 or later.