url-regex-safe

url-regex-safe 用于 URL 的正则表达式匹配。维护中、安全且浏览器友好版的 url-regex。解决了 Node.js 服务器的 CVE-2020-7661。适用于 Node v14+ 和浏览器。为Spam Scanner 和 Forward Email 维护。 目录 前言 安装 使用方法 Node 浏览器 选项 快速提示与从 url-regex 迁移 限制 贡献者 许可证 前言 在发现 CVE-2020-7661 并 公开披露（通过我在 Spam Scanner 和 Forward Email 上的工作）后，我使用了 url-regex...

CVE-2020-7661

all versions of url-regex are vulnerable to Regular Expression Denial of Service. An attacker providing a very long string in String.test can cause a Denial of Service...

Regular Expression Denial of Service

Overview All versions of url-regex are vulnerable to a Regular Expression Denial of Service. An attacker providing a very long string in String.test can cause a Denial of Service. Recommendation There are no patches and the software is not currently maintained. The security researcher who found t...

CVE-2020-7661

all versions of url-regex are vulnerable to Regular Expression Denial of Service. An attacker providing a very long string in String.test can cause a Denial of Service...

CVE-2020-7661

CVE-2020-7661 affects the url-regex package (and related urlregex) with a Regular Expression Denial of Service caused by catastrophic backtracking when testing very long strings in String.test. Affected: url-regex/url-regex-based packages (Node.js/npm ecosystem) with versions prior to the fix. Im...

08cms (1.0.0), 0card-images-helper (1.0.2) +5063 more potentially affected by CVE-2020-7661 via url-regex (>=1.0.4, <=5.0.0)

url-regex NPM version =1.0.4, =1.0.3, =0.0.1, =1.0.0, =0.1.0, =1.0.0, =1.0.0, =1.0.1 - 3e 1.0.0 and more Source cves: CVE-2020-7661 Source advisory: SNYK:JS-URLREGEX-569472...