CVE-2021-26813

markdown2 >=1.0.1.18, fixed in 2.4.0, is affected by a regular expression denial of service vulnerability

published March 3, 2021

CVSS
—
EPSS
2%
Percentile
83.3
In the wild
Unconfirmed
What it is

markdown2 >=1.0.1.18, fixed in 2.4.0, is affected by a regular expression denial of service vulnerability. If an attacker provides a malicious string, it can make markdown2 processing difficult or delayed for an extended period of time.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02319 · 83.3th percentile
Published
2021-03-03T15:17Z
EPSS history
Timeline
  • 03 MAR 15:17Z
    markdown2 >=1.0.1.18, fixed in 2.4.0, is affected by a regular expression denial of service vulnerability
    cvelistv5