52 matches found
Regular Expression Denial Of Service (ReDoS)
hosted-git-info is vulnerable to regular expression denial of service ReDoS. An attacker can provide a malicious string via shortcutMatch in the function fromUrl in index.js to crash the application...
CVE-2021-23362
The package hosted-git-info before 3.0.8 are vulnerable to Regular Expression Denial of Service ReDoS via regular expression shortcutMatch in the fromUrl function in index.js. The affected regular expression exhibits polynomial worst-case time complexity...
DEBIAN-CVE-2021-23362
The package hosted-git-info before 3.0.8 are vulnerable to Regular Expression Denial of Service ReDoS via regular expression shortcutMatch in the fromUrl function in index.js. The affected regular expression exhibits polynomial worst-case time complexity...
AZL-44058 CVE-2021-23362 affecting package js-jquery 3.5.0-4
The package hosted-git-info before 3.0.8 are vulnerable to Regular Expression Denial of Service ReDoS via regular expression shortcutMatch in the fromUrl function in index.js. The affected regular expression exhibits polynomial worst-case time complexity...
CVE-2021-23362
The package hosted-git-info before 3.0.8 are vulnerable to Regular Expression Denial of Service ReDoS via regular expression shortcutMatch in the fromUrl function in index.js. The affected regular expression exhibits polynomial worst-case time complexity...
Design/Logic Flaw
The package hosted-git-info before 3.0.8 are vulnerable to Regular Expression Denial of Service ReDoS via regular expression shortcutMatch in the fromUrl function in index.js. The affected regular expression exhibits polynomial worst-case time complexity...
UBUNTU-CVE-2021-23362
The package hosted-git-info before 3.0.8 are vulnerable to Regular Expression Denial of Service ReDoS via regular expression shortcutMatch in the fromUrl function in index.js. The affected regular expression exhibits polynomial worst-case time complexity...
CVE-2021-23362
CVE-2021-23362 affects the Node.js package hosted-git-info prior to 3.0.8. The vulnerability is a Regular Expression Denial of Service (ReDoS) in the fromUrl function, caused by a regex shortcutMatch that can exhibit polynomial worst-case time. Affected detail: Regular expression complexity leads...
CVE-2021-23362
The package hosted-git-info before 3.0.8 are vulnerable to Regular Expression Denial of Service ReDoS via regular expression shortcutMatch in the fromUrl function in index.js. The affected regular expression exhibits polynomial worst-case time complexity...
Ruy Adorno hosted-git-info 安全漏洞
Ruy Adorno hosted-git-info is a Ruy Adorno open source application . It provides the ability to recognize and convert various git host URLs between protocols. hosted-git-info before 3.0.8 A security vulnerability exists that stems from vulnerability to a shortcutMatch regular expression denial of...
PT-2021-5825 · Unknown +8 · Hosted-Git-Info +8
Name of the Vulnerable Software and Affected Versions: hosted-git-info versions prior to 3.0.8 Description: The issue is related to a Regular Expression Denial of Service ReDoS in the fromUrl function in index.js. This occurs due to the shortcutMatch regular expression, which exhibits polynomial...
Regular Expression Denial of Service (ReDoS)
Overview hosted-git-info is a Provides metadata and conversions from repository urls for Github, Bitbucket and Gitlab Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS via regular expression shortcutMatch in the fromUrl function in index.js. The affect...