CVE-2025-9670
mixmark-io turndown commonmark-rules.js redos
Summary
mixmark-io turndown commonmark-rules.js redos
Original description
The description as published by the source.
A security flaw has been discovered in mixmark-io turndown up to 7.2.1. This affects an unknown function of the file src/commonmark-rules.js. Performing manipulation results in inefficient regular expression complexity. It is possible to initiate the attack remotely. The exploit has been released to the public and may be exploited.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2025-9670 node-turndown
- Ubuntu UBUNTU-CVE-2025-9670 node-turndown
References
- advisory github.com
- advisory nvd.nist.gov
- advisory vuldb.com
- advisory vuldb.com
- report github.com
- report github.com
- report vuldb.com