Markdown2 Project: Security Vulnerabilities
markdown2 >=1.0.1.18, fixed in 2.4.0, is affected by a regular expression denial of service vulnerability. If an attacker provides a malicious string, it can make markdown2 processing difficult or delayed for an extended period of time.
CVSS Score
7.5
EPSS Score
0.005
Published
2021-03-03