CVE-2024-1899
- Source
- https://cve.org/CVERecord?id=CVE-2024-1899
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-1899.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2024-1899
- Aliases
- Downstream
CGA (16)
MINI (6)
ROOT (1)
- Related
- Published
- 2024-02-26T18:45:23Z
- Modified
- 2026-08-12T03:51:15Z
- Severity
-
- 5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVSS Calculator
- Summary
- Showdownjs Denial of Service
- Details
-
An issue in the anchors subparser of Showdownjs versions <= 2.1.0 could allow a remote attacker to cause denial of service conditions.
- Database specific
{ "cna_assigner": "tenable", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/1xxx/CVE-2024-1899.json" }- References
Affected packages
Git / github.com/showdownjs/showdown
Affected ranges
- Type
- GIT
- Repo
- https://github.com/showdownjs/showdown
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedLast Affected
- Database specific
-
Show details
{ "cpe": "cpe:2.3:a:showdownjs:showdown:*:*:*:*:*:node.js:*:*", "extracted_events": [ { "introduced": "0" }, { "last_affected": "2.1.0" } ], "source": [ "AFFECTED_FIELD", "CPE_RANGE" ] }
Affected versions
0.*
0.4.0
0.5.0
0.5.1
1.*
1.0.0
1.0.0-alpha.2
1.0.0-alpha1
1.0.1
1.0.2
1.1.0
1.2.0
1.2.1
1.2.2
1.3.0
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.8.0
1.8.1
1.8.2
1.8.3
1.8.4
1.8.5
1.8.6
1.8.7
1.9.0
1.9.1
2.*
2.0.0
2.0.0-alpha
2.0.1
2.0.2
2.0.3
2.0.4
2.1.0
v0.*
v0.3.1