CVE-2024-1899

ADVISORY - github

Summary

Showdownjs, versions <= 2.1.0, anchors subparser used to parse links has a nested regular expression which can lead to denial of service conditions given malicious input.

EPSS Score⁠: 0.00267 (0.504)

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-674⁠

Uncontrolled Recursion

ADVISORY - github

CWE-674⁠

Uncontrolled Recursion

CWE-777⁠

Regular Expression without Anchors

Impacted images

Advisories

NIST

CREATED

2 years ago

UPDATED

9 months ago

ADVISORY IDCVE-2024-1899⁠

EXPLOITABILITY SCORE

3.9

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-674⁠

CVSS SCORE

5.3medium

GitHub

CREATED

2 years ago

UPDATED

1 month ago

ADVISORY IDGHSA-rmmh-p597-ppvv⁠

EXPLOITABILITY SCORE

3.9

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-674⁠CWE-777⁠

CVSS SCORE

5.3medium

Ubuntu

CREATED

2 years ago

UPDATED

1 year ago

ADVISORY IDCVE-2024-1899⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Amedium