Lucene search
+L

2 matches found

OSV
OSV
•added 2025/01/16 12:31 a.m.•14 views

GHSA-6FX8-H7JM-663J parse-uri Regular expression Denial of Service (ReDoS)

An issue in parse-uri v1.0.9 allows attackers to cause a Regular expression Denial of Service ReDoS via a crafted URL. PoC js async function exploit const parseuri = require"parse-uri"; // This input is designed to cause excessive backtracking in the regex const craftedInput = 'http://example.com...

6.9CVSS6.7AI score0.00522EPSS
SaveExploits0References3
Rows per page
Query Builder