2 matches found
NPM: decode-uri-component: Denial of service via exponential decoding of malformed percent-encoded input
NPM: decode-uri-component: Denial of service via exponential decoding of malformed percent-encoded input vulnerability discovered by ? in WordPress Npm decode-uri-component versions = 0.4.2...
8.7CVSS5.9AI score0.00507EPSS
SaveExploits0References7Affected Software1
GHSA-VCC3-GHJQ-M6FR decode-uri-component: Denial of service via exponential decoding of malformed percent-encoded input
Impact An attacker who can supply input to decodeUriComponent directly or via a dependency that uses this package on URL/query/path data can cause excessive CPU usage and application unresponsiveness. This is an availability issue; there is no known memory corruption, data disclosure, or remote...
8.7CVSS6.4AI score0.00507EPSS
SaveExploits0References7
20