2 matches found
GHSA-6CV4-P8M7-4R25 Forge: ReDoS in forge.http response header and cookie trimming
forge.http trims response header and Set-Cookie values with the regular expression /\s$/, which takes quadratic time on a long run of whitespace followed by another character. A server or on-path attacker can block a forge.http client for minutes with one large response header. Fixed in node-forg...
5.9CVSS5.8AI score
SaveExploits0References5
npm: Forge: ReDoS in forge.http response header and cookie trimming
npm: Forge: ReDoS in forge.http response header and cookie trimming vulnerability discovered by ? in WordPress npm node-forge versions = 0.1.2, = 1.4.2...
5.9CVSS5.8AI score
SaveExploits0References5Affected Software1
20