Regular Expression Denial of Service in no-case

2018-07-2419:51:16

Google

osv.dev

0.001 Low

EPSS

Percentile

43.2%

Affected versions of no-case are vulnerable to a regular expression denial of service when parsing untrusted user input.

Recommendation

Update to version 2.3.2 or later.

CPENameOperatorVersion
no-caselt2.3.2

CPE	Name	Operator	Version
	no-case	lt	2.3.2

github.com/advisories/GHSA-ff6r-5jwm-8292

github.com/blakeembrey/no-case/issues/17

nvd.nist.gov/vuln/detail/CVE-2017-16099

www.npmjs.com/advisories/529

0.001 Low

EPSS

Percentile

43.2%

Related for OSV:GHSA-FF6R-5JWM-8292