Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2026-103043

anchorme through 3.0.8 Regular Expression Denial of Service

anchorme through 3.0.8 contains a regular expression denial of service vulnerability in the IPv6 host extraction regex due to catastrophic backtracking. Attackers can supply specially crafted input strings with repeated patterns to cause exponential regex engine backtracking, blocking the Node.js event loop and denying service to other requests.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Alexcorvi Anchorme Project
Products
Anchorme Anchorme
CVE-2021-23411

Cross-site Scripting (XSS)

Affected versions of this package are vulnerable to Cross-site Scripting (XSS) via the main functionality. It accepts input that can result in the output (an anchor a tag) containing undesirable Javascript code that can be executed upon user interaction.

CVSS 3.1 · 5.4 Medium EPSS 1.2% KEV · Not listed
Vendors
Anchorme Project
Products
Anchorme