Skip to content

CVE-2024-1899

CVE-2024-1899 · Showdownjs Denial of Service

This page contains facts from public vulnerability sources. Check the original advisory before updating.

An issue in the anchors subparser of Showdownjs versions <= 2.1.0 could allow a remote attacker to cause denial of service conditions.

CVSS 5.3 · Medium · EPSS 0.8%

Published: 2024-02-26T18:45:23.289Z
Updated: 2024-08-01T18:56:22.277Z

Stack: node

Affected products and versions

showdown
Versions
- ≥ 0, ≤ 2.1.0: Affected (custom)
No fix published
showdown npm
Affected ranges
- SEMVER: ≤ 2.1.0
No fix published

Original sources

Check your server →