Skip to content

Product

debian/codemirror-js vulnerabilities

3 published CVES affecting debian/codemirror-js, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
3
Critical
0
High
1
Medium
1
Low
0
Unscored
1
CISA KEV
0

Latest debian/codemirror-js CVEs

Newest publication first

  1. CVE-2025-6493 CodeMirror Markdown Mode markdown.js redos

    Published
    MediumCVSS 6.9 EPSS 0.53%

    A weakness has been identified in CodeMirror up to 5.65.20. Affected is an unknown function of the file mode/markdown/markdown.js of the component Markdown Mode. This manipulation causes inefficient regular expression complexity. It is possible to initiate the attack remotely. Th...

  3. CVE-2020-7760 Regular Expression Denial of Service (ReDoS)

    Published
    HighCVSS 7.5 EPSS 5.3%

    This affects the package codemirror before 5.58.2; the package org.apache.marmotta.webjars:codemirror before 5.58.2. The vulnerable regular expression is located in https://github.com/codemirror/CodeMirror/blob/cdb228ac736369c685865b122b736cd0d397836c/mode/javascript/javascript.j...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.