-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| simple-markdown | npm | < 0.6.1 | 0.6.1 |
Miggo AIRoot Cause AnalysisThe vulnerability was explicitly fixed by modifying the autolink regex in simple-markdown.js (changed from /^<([^ >]+:/[^ >]+)>/ to /^<([^: >]+:/[^ >]+)>/). The commit message and CWE-1333 classification confirm this was an inefficient regex pattern. The attack vector demonstrates exploitation through the autolink parsing logic, and no other code changes were made in the patching commit.
JavaScriptJavaScriptKEV Misses 88% of Exploited CVEs- Get the report