@dbx/vizcomp (>=2.7.2, <=3.1.0), @gustavnikolaj/htmlizer (0.8.1) +617 more potentially affected by unknown CVE via nwmatcher (1.3.9)

nwmatcher NPM version 1.3.9 is affected by a known vulnerability. The following packages have a transitive dependency on nwmatcher and may be impacted: - @dbx/vizcomp =2.7.2, =1.5.3, =0.2.6, =1.0.0-alpha.0, =0.0.23, =0.0.1, =1.0.0, =0.1.0, =0.0.1, =0.4.3 and more Source cves: unknown CVE Source...

Regular Expression Denial Of Service (ReDoS)

nwmatcher is vulnerable to regular expression denial of service. The use of multiple repeated instances of the "\s" in regular expressionPatterns allows an attacker to crash the application via a malicious string...

GHSA-6394-6H9H-CFJG Regular Expression Denial of Service

A Regular Expression vulnerability was found in nwmatcher before 1.4.4. The fix replacing multiple repeated instances of the "\s" pattern...

Regular Expression Denial of Service

A Regular Expression vulnerability was found in nwmatcher before 1.4.4. The fix replacing multiple repeated instances of the "\s" pattern...

@dbx/vizcomp (>=2.7.2, <=3.1.0), @gustavnikolaj/htmlizer (0.8.1) +617 more potentially affected by unknown CVE via nwmatcher (1.3.9)

nwmatcher NPM version 1.3.9 is affected by a known vulnerability. The following packages have a transitive dependency on nwmatcher and may be impacted: - @dbx/vizcomp =2.7.2, =1.5.3, =0.2.6, =1.0.0-alpha.0, =0.0.23, =0.0.1, =1.0.0, =0.1.0, =0.0.1, =0.4.3 and more Source cves: unknown CVE Source...

@dbx/vizcomp (>=2.7.2, <=3.1.0), @gustavnikolaj/htmlizer (0.8.1) +617 more potentially affected by unknown CVE via nwmatcher (1.3.9)

nwmatcher NPM version 1.3.9 is affected by a known vulnerability. The following packages have a transitive dependency on nwmatcher and may be impacted: - @dbx/vizcomp =2.7.2, =1.5.3, =0.2.6, =1.0.0-alpha.0, =0.0.23, =0.0.1, =1.0.0, =0.1.0, =0.0.1, =0.4.3 and more Source cves: unknown CVE Source...

PT-2019-20009

Name of the Vulnerable Software and Affected Versions nwmatcher versions prior to 1.4.4 Description A Regular Expression vulnerability was found. The issue involves repeated instances of the s pattern. Recommendations For versions prior to 1.4.4, update to version 1.4.4 or later to resolve the...