Lucene search

K
osvGoogleOSV:GHSA-JXQQ-CQM6-PFQ9
HistoryJul 24, 2018 - 8:06 p.m.

Regular Expression Denial of Service in slug

2018-07-2420:06:45
Google
osv.dev
6

0.001 Low

EPSS

Percentile

43.2%

Affected versions of slug are vulnerable to a regular expression denial of service when parsing untrusted user input.

The issue is low severity, as it takes 50,000 characters to cause the event loop to block for 2 seconds,

About 50k characters can block the event loop for 2 seconds.

Recommendation

Update to version 0.9.2 or later.

CPENameOperatorVersion
sluglt0.9.2

0.001 Low

EPSS

Percentile

43.2%

Related for OSV:GHSA-JXQQ-CQM6-PFQ9