What is GHSA-q22g-8fr4-qpj4?

GHSA-q22g-8fr4-qpj4 is a security advisory published by GitHub Security Advisories with High severity. Regular Expression Denial of Service in remarkable

Which CVE IDs does GHSA-q22g-8fr4-qpj4 cover?

GHSA-q22g-8fr4-qpj4 covers the following CVE IDs: CVE-2019-12041. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-q22g-8fr4-qpj4?

GHSA-q22g-8fr4-qpj4 has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

Which products are affected by GHSA-q22g-8fr4-qpj4?

GHSA-q22g-8fr4-qpj4 affects 1 product, including: npm/remarkable:\u003c 1.7.2.

GHSA-q22g-8fr4-qpj4HighCVSS 7.5

Regular Expression Denial of Service in remarkable

Vendor

GitHub Security Advisories

Published

June 6, 2019

Last Modified

April 22, 2024

🔗 CVE IDs covered (1)

CVE-2019-12041 →

📋 Description

lib/common/html_re.js in remarkable 1.7.1 allows Regular Expression Denial of Service (ReDoS) via a CDATA section.

🎯 Affected products1

npm/remarkable:< 1.7.2

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2019-12041
https://github.com/jonschlinkert/remarkable/issues/331
https://snyk.io/vuln/SNYK-JS-REMARKABLE-174639
https://github.com/jonschlinkert/remarkable/pull/335#issuecomment-515958379
https://github.com/jonschlinkert/remarkable/commit/287dfbf22e70790c8b709ae37a5be0523597673c
https://github.com/advisories/GHSA-q22g-8fr4-qpj4