CVE-2022-21670 — Uncontrolled Resource Consumption in markdown-it
markdown-it is a Markdown parser. Prior to version 1.3.2, special patterns with length greater than 50 thousand characterss could slow down the parser significantly. Users shoul…
Published: 2022-01-10 · CVSS: 5.3 · CVSS 3.1
markdown-it is a Markdown parser. Prior to version 1.3.2, special patterns with length greater than 50 thousand characterss could slow down the parser significantly. Users should upgrade to version 12.3.2 to receive a patch. There are no known workarounds aside from upgrading.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7