Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2024/07/29 5:46 p.m.62 views

fast-xml-parser vulnerable to ReDOS at currency parsing

Summary A ReDOS that exists on currency.js was discovered by Gauss Security Labs R&D team. Details https://github.com/NaturalIntelligence/fast-xml-parser/blob/v4.4.0/src/v5/valueParsers/currency.jsL10 contains a vulnerable regex PoC pass the following string '\t'.repeat13337 + '.' Impact Denial o...

7.5CVSS7.4AI score0.00828EPSS
SaveExploits1References6Affected Software1
Rows per page
Query Builder