Skip to content
OpenAdvisories
Low CVE-2016-10520 EUVD-2019-0234GHSA-6354-6mhv-mvv5

Regular Expression Denial of Service in jadedown

Published May 31, 2018 · Updated Sep 17, 2024 · Assigned by hackerone

Vendor: HackerOne Product: jadedown node module Package: jadedown Ecosystem: npm

Description

jadedown is vulnerable to regular expression denial of service (ReDoS) when certain types of user input is passed in.

Affected products

VendorProductAffectedFixed
HackerOne jadedown node module All versions —

Affected packages

EcosystemPackageAffectedFixedRecord
npm jadedown <= 0.0.3 — GHSA-6354-6mhv-mvv5

References