Regular Expression Denial of Service in remarkable

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2019-12041 · ADVISORY
• jonschlinkert/remarkable · WEB
• jonschlinkert/remarkable#335 · WEB
• jonschlinkert/remarkable commit 287dfbf · WEB
• snyk.io/vuln/SNYK-JS-REMARKABLE-174639 · WEB

remarkable のその他の脆弱性

• CVE-2019-12043中 6.1In remarkable 1.7.1, lib/parser_inline.js mishandles URL filtering, which allows attackers to trigger XSS via unprintable characters, as dem…
• CVE-2017-16006中 6.1Remarkable is a markdown parser. In versions 1.6.2 and lower, remarkable allows the use of `data:` URIs in links and can therefore execute j…
• CVE-2014-10065中 6.1Certain input when passed into remarkable before 1.4.1 will bypass the bad protocol check that disallows the javascript: scheme allowing for…