Lucene search
+L

2 matches found

OSV
OSV
•added 2022/08/02 12:00 a.m.•29 views

GHSA-VP56-6G26-6827 node-fetch Inefficient Regular Expression Complexity

node-fetch is a light-weight module that brings window.fetch to node.js. Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS in the isOriginPotentiallyTrustworthy function in referrer.js, when processing a URL string with alternating letters and periods,...

5.9CVSS6.5AI score0.01298EPSS
SaveExploits1References6
Github Security Blog
Github Security Blog
•added 2022/08/02 12:00 a.m.•28 views

node-fetch Inefficient Regular Expression Complexity

node-fetch is a light-weight module that brings window.fetch to node.js. Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS in the isOriginPotentiallyTrustworthy function in referrer.js, when processing a URL string with alternating letters and periods,...

5.9CVSS5.4AI score0.01298EPSS
SaveExploits1References6Affected Software1
Rows per page
Query Builder