Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
•added 2026/07/02 8:20 p.m.•53 views

@asymmetric-effort/nogginlessdom vulnerable to ReDoS via user-controlled regex in HTMLInputElement pattern validation

Summary The HTMLInputElement.checkValidity method constructed a RegExp directly from the user-controlled pattern property without any sanitization or timeout protection. This allowed an attacker to inject a regex with catastrophic backtracking, freezing the event loop. Fix Fixed in commit...

5.8AI score
SaveExploits0References3Affected Software1
Rows per page
Query Builder