{"id":"CVE-2019-12041","aliases":["GHSA-q22g-8fr4-qpj4"],"url":"https://o3.security/vulnerability/CVE-2019-12041","summary":"Regular Expression Denial of Service in remarkable","details":"lib/common/html_re.js in remarkable 1.7.1 allows Regular Expression Denial of Service (ReDoS) via a CDATA section.","published":"2019-05-13T13:29:02.243Z","modified":"2026-07-08T15:54:47.883041Z","cvss":{"score":7.5,"severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},"epss":null,"cisaKev":null,"exploitsKnown":null,"affectedPackages":[{"ecosystem":"npm","name":"remarkable","fixedVersion":"1.7.2"}],"fix":null,"references":[{"type":"REPORT","url":"https://github.com/jonschlinkert/remarkable/issues/331"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-07-08T15:54:47.883041Z"}}