CVE-2025-9670
mixmark-io turndown commonmark-rules.js redos
Résumé
mixmark-io turndown commonmark-rules.js redos
Description d'origine
La description telle que publiée par la source (souvent en anglais).
A security flaw has been discovered in mixmark-io turndown up to 7.2.1. This affects an unknown function of the file src/commonmark-rules.js. Performing manipulation results in inefficient regular expression complexity. It is possible to initiate the attack remotely. The exploit has been released to the public and may be exploited.
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2025-9670 node-turndown
- Ubuntu UBUNTU-CVE-2025-9670 node-turndown
Références
- advisory github.com
- advisory nvd.nist.gov
- advisory vuldb.com
- advisory vuldb.com
- report github.com
- report github.com
- report vuldb.com