all versions of url-regex are vulnerable to Regular Expression Denial of Service. An attacker providing a very long string in String.test can cause a Denial of Service.
[
{
"product": "url-regex",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "all versions"
}
]
}
]