Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
mixmark-io turndown commonmark-rules.js redos
Vulnerability Description
A security flaw has been discovered in mixmark-io turndown up to 7.2.1. This affects an unknown function of the file src/commonmark-rules.js. Performing manipulation results in inefficient regular expression complexity. It is possible to initiate the attack remotely. The exploit has been released to the public and may be exploited.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Vulnerability Type
CWE-1333
Vulnerability Title
Turndown 安全漏洞
Vulnerability Description
Turndown是mixmark-io开源的一个HTML到Markdown转换器。 Turndown 7.2.1及之前版本存在安全漏洞，该漏洞源于文件src/commonmark-rules.js中正则表达式效率低下，可能导致拒绝服务攻击。
CVSS Information
N/A
Vulnerability Type
N/A