CVE-2022-21670

ADVISORY - github

Summary

Special patterns with length > 50K chars can slow down parser significantly.

const md = require('markdown-it')();

md.render(`x ${' '.repeat(150000)} x  \nx`);

Upgrade to v12.3.2+

No.

EPSS Score⁠: 0.01114 (0.785)

ADVISORY - nist

Inefficient Regular Expression Complexity

Uncontrolled Resource Consumption

ADVISORY - github

Inefficient Regular Expression Complexity

Uncontrolled Resource Consumption

ADVISORY - gitlab

OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities

Inefficient Regular Expression Complexity

OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities

See which of your images are affected by this CVE and how to fix them by signing into Docker Scout.