Skip to content
OpenAdvisories
Medium DSA-4789-1 1 CVE

codemirror-js - security update

Published Nov 12, 2020 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 10 codemirror-js 5.43.0-1+deb10u1

Vulnerabilities 1

  • Medium 5.3
    CVE-2020-7760

    Regular Expression Denial of Service (ReDoS)

    This affects the package codemirror before 5.58.2; the package org.apache.marmotta.webjars:codemirror before 5.58.2. The vulnerable regular expression is located in https://github.com/codemirror/CodeMirror/blob/cdb228ac736369c685865b122b736cd0d397836c/mode/ja…

    codemirror-js codemirror-js codemirror Debian Ubuntu npm