CVE-2024-25355

s3-url-parser 1.0.3 is vulnerable to Denial of service via the regexes component...

Regular Expression Denial Of Service (ReDoS)

s3-url-parser is vulnerable to Regular Expression Denial Of Service ReDoS. The vulnerability is due to a regex with inefficient complexity, allowing an attacker to craft long s3 URLS that triggers excessive resource consumption, leading to denial of service...

@alezanai/torquator (>=1.0.0, <=1.5.0), singwareplayercreator (1.1.0) potentially affected by CVE-2024-25355 via s3-url-parser (1.0.3)

s3-url-parser NPM version 1.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on s3-url-parser and may be impacted: - @alezanai/torquator =1.0.0, =1.5.0 - singwareplayercreator 1.1.0 Source cves: CVE-2024-25355 Source advisory: OSV:GHSA-R4Q9-XX5G-J24P...

s3-url-parser vulnerable to Denial of Service via regexes component

s3-url-parser 1.0.3 is vulnerable to denial of service via the regexes component...

CVE-2024-25355

s3-url-parser 1.0.3 is vulnerable to Denial of service via the regexes component...

CVE-2024-25355

s3-url-parser 1.0.3 is vulnerable to Denial of service via the regexes component...

CVE-2024-25355

The s3-url-parser library (version 1.0.3 ) is vulnerable to a Regular Expression Denial of Service (ReDoS) attack via its regexes component. The root cause is a regex with inefficient complexity , which allows an attacker to craft long S3 URLs that trigger excessive resource consumption , leading...

CVE-2024-25355

s3-url-parser 1.0.3 is vulnerable to Denial of service via the regexes component...

PT-2024-20899 · Unknown · S3-Url-Parser

Name of the Vulnerable Software and Affected Versions: s3-url-parser version 1.0.3 Description: The issue is related to a denial of service via the regexes component. Recommendations: For s3-url-parser version 1.0.3, consider disabling the regexes component as a temporary workaround until a patch...

CVE-2024-25355: Uncontrolled Resource Consumption

s3-url-parser 1.0.3 is vulnerable to Denial of service via the regexes component...

npm s3-url-parser 安全漏洞

npm s3-url-parser is a library from npm USA. It is used to bring up information from S3 URLs in any format. A security vulnerability exists in npm s3-url-parser version 1.0.3, which stems from the application's vulnerability to denial-of-service attacks with regular expression components...