Codemirror

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:codemirror:codemirror:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCodemirror (b76adff2-4801-5d0d-bf9e-493ff138912e)
ProductCodemirror (00be6246-88b6-5cae-bba0-57a3cc318a24)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:bitbucket/skb_/codemirror purl2cpe 2026-06-01 10:16:03.163144
pkg:deb/debian/codemirror-js purl2cpe 2026-06-01 10:16:03.163147
pkg:deb/ubuntu/codemirror-js purl2cpe 2026-06-01 10:16:03.163150
pkg:github/codemirror/codemirror purl2cpe 2026-06-01 10:16:03.163157
pkg:maven/org.webjars.npm/codemirror purl2cpe 2026-06-01 10:16:03.163160
pkg:npm/codemirror purl2cpe 2026-06-01 10:16:03.163162
pkg:nuget/CodeMirror purl2cpe 2026-06-01 10:16:03.163165
pkg:rpm/fedora/nodejs-codemirror purl2cpe 2026-06-01 10:16:03.163168
pkg:sourceforge/codemirror.mirror purl2cpe 2026-06-01 10:16:03.163170

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-7760 vulnerable 2026-06-08 05:27:14.192259 Regular Expression Denial of Service (ReDoS)
MEDIUM (5.3)
This affects the package codemirror before 5.58.2; the package org.apache.marmotta.webjars:codemirror before 5.58.2. The vulnerable regular expression is located in https://github.com/codemirror/CodeMirror/blob/cdb228ac736369c685865b122b736cd0d397836c/mode/javascript/javascript.jsL129. The ReDOS vulnerability of the regex is mainly due to the sub-pattern (s|/*.*?*/)*
Published: 2020-10-30T11:10:32.942Z
Updated: 2024-09-17T01:06:44.297Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.