org.webjars.npm:linkify-it@2.1.0

latest version

5.0.2

latest non vulnerable version

5.0.2

first published

10 years ago

latest version published

8 days ago

licenses detected

MIT
[1.2.0,)

package registry

View on Maven Central Repository

Go back to all versions of this package

Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the org.webjars.npm:linkify-it package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability Vulnerable Version

Vulnerability	Vulnerable Version
H Inefficient Algorithmic Complexity org.webjars.npm:linkify-it is a Links recognition library with FULL unicode support Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity in the `mailto:` validator scan-loop on attacker-supplied text. An attacker can cause excessive CPU consumption by submitting specially crafted input that triggers repeated scanning of the remaining text. How to fix Inefficient Algorithmic Complexity? Upgrade `org.webjars.npm:linkify-it` to version 5.0.2 or higher.	[,5.0.2)
H Regular Expression Denial of Service (ReDoS) org.webjars.npm:linkify-it is a Links recognition library with FULL unicode support Affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS) due to quadratic algorithmic complexity in the `match` function. An attacker can exhaust CPU resources and cause significant delays in processing by submitting specially crafted input containing a large number of email-like or link-like strings. How to fix Regular Expression Denial of Service (ReDoS)? Upgrade `org.webjars.npm:linkify-it` to version 5.0.2 or higher.	[,5.0.2)

Inefficient Algorithmic Complexity

org.webjars.npm:linkify-it is a Links recognition library with FULL unicode support

Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity in the mailto: validator scan-loop on attacker-supplied text. An attacker can cause excessive CPU consumption by submitting specially crafted input that triggers repeated scanning of the remaining text.

How to fix Inefficient Algorithmic Complexity?

Upgrade org.webjars.npm:linkify-it to version 5.0.2 or higher.

[,5.0.2)

Regular Expression Denial of Service (ReDoS)

org.webjars.npm:linkify-it is a Links recognition library with FULL unicode support

Affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS) due to quadratic algorithmic complexity in the match function. An attacker can exhaust CPU resources and cause significant delays in processing by submitting specially crafted input containing a large number of email-like or link-like strings.

How to fix Regular Expression Denial of Service (ReDoS)?

Upgrade org.webjars.npm:linkify-it to version 5.0.2 or higher.

[,5.0.2)

Go back to all versions of this package