Regular Expression Denial of Service (ReDoS)

Overview validator is a library of string validators and sanitizers. Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS via the isSlug function. PoC js var validator = require"validator" function buildattackn var ret = "111" for var i = 0; i n; i++ ret ...

Regular Expression Denial Of Service (ReDoS)

validator is vulnerable to regular expression denial of service ReDoS. The vulnerability exists through the value passed into isSlug which gets evaluated by the regular expression in charsetRegex...