CVE-2021-43308: Markdown-Link-Extractor Project Markdown-Link-Extractor

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the markdown-link-extractor npm package, when an attacker is able to supply arbitrary input to the module's exported function

Affected products

• Markdown-Link-Extractor Project Markdown-Link-Extractor: before 3.0.2 (fixed in 3.0.2); version 4.0.0 only

Published 2022-06-02. Last modified 2026-06-17.