CVE-2024-1899

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

An issue in the anchors subparser of Showdownjs versions <= 2.1.0 could allow a remote attacker to cause denial of service conditions.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Weakness enumeration

CWE-674

Affected software

No affected versions have been published.

Timeline

Published
Feb 26, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-19005.5Improper session management in the identity provider authentication flow in Devolutions Server 2023.3.14.0 and earlier allows an authenticatCVE-2024-19014.3Denial of service in PAM password rotation during the check-in process in Devolutions Server 2023.3.14.0 allows an authenticated user with sCVE-2024-19027.5lunary-ai/lunary is vulnerable to a session reuse attack, allowing a removed user to change the organization name without proper authorizatiCVE-2024-19044.3The MasterStudy LMS plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the search_posts CVE-2024-19055.9The Smart Forms WordPress plugin before 2.6.96 does not sanitise and escape some of its settings, which could allow high privilege users suCVE-2024-19064.3The Categorify plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.7.4. This is due tCVE-2024-19074.3The Categorify plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.7.4. This is due tCVE-2024-19086.5An Improper Privilege Management vulnerability was identified in GitHub Enterprise Server that allowed an attacker to use the Enterprise ActCVE-2024-19094.3The Categorify plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.7.4. This is due tCVE-2024-19104.3The Categorify plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.7.4. This is due tCVE-2024-19124.3The Categorify plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.7.4. This is due tCVE-2024-19137.6An attacker who successfully exploited these vulnerabilities could cause the robot to stop, make the robot controller inaccessible, or execu
CVE-2024-1899: Medium severity, CVSS 5.3 | Vulnix