PT-2020-21035

Published

2020-09-03

·

Updated

2020-09-03

Description by

CVSS 3.1
5.3
Medium
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Name of the Vulnerable Software and Affected Versions simple-markdown versions prior to 0.5.2
Description The issue concerns a Regular Expression Denial of Service (ReDoS) that affects the performance of the SimpleMarkdown.defaultInlineParse() function when parsing inline code blocks.
Recommendations For versions prior to 0.5.2, upgrade to version 0.5.2 or later.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
GHSA-4XF9-PGVV-XX67
Found an issue in the description? Have something to add? Feel free to write us 👾