Lucene search
+L

2 matches found

osv_ghsa
osv_ghsa
•added 2026/11/10 9:16 p.m.•6 views

GHSA-6CV4-P8M7-4R25 Forge: ReDoS in forge.http response header and cookie trimming

forge.http trims response header and Set-Cookie values with the regular expression /\s$/, which takes quadratic time on a long run of whitespace followed by another character. A server or on-path attacker can block a forge.http client for minutes with one large response header. Fixed in node-forg...

5.9CVSS5.8AI score
SaveExploits0References5
Patchstack
Patchstack
•added 2026/11/10 9:16 p.m.•4 views

npm: Forge: ReDoS in forge.http response header and cookie trimming

npm: Forge: ReDoS in forge.http response header and cookie trimming vulnerability discovered by ? in WordPress npm node-forge versions = 0.1.2, = 1.4.2...

5.9CVSS5.8AI score
SaveExploits0References5Affected Software1
Rows per page
Query Builder