2 matches found
Regular Expression Denial Of Service (ReDoS)
diff is vulnerable to regular expression denial of service ReDoS. The vulnerability exists due to improper use of regular expression to parse data from the fileHeader parameter in parseFileHeader, allowing an attacker to cause a denial of service condition by submitting a malicious file header...
Regular Expression Denial of Service (ReDoS)
A vulnerability was found in diff before v3.5.0, the affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS attacks...