Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2022/08/02 12:0 a.m.25 views

node-fetch Inefficient Regular Expression Complexity

node-fetch is a light-weight module that brings window.fetch to node.js. Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS in the isOriginPotentiallyTrustworthy function in referrer.js, when processing a URL string with alternating letters and periods,...

5.9CVSS5.4AI score0.01126EPSS
SaveExploits1References6Affected Software1
Rows per page
Query Builder