Mozilla: Missing Function Level Access Control in Mozilla formula containsRegular Expression Denial of Service (CVE-2023-25166)

Vulnerability description not provided...

Regular Expression Denial Of Service (ReDoS)

sideway/formula is vulnerable to Regular Expression Denial Of Service ReDoS. The vulnerability exists in index.js due to regular expression complexity which allows attacker to provide crafted strings to the formula's parser that might lead to polynomial execution time causing an application crash...

fast2render (>=4.1.67 <=4.1.79) potentially affected by CVE-2023-25166 via @sideway/formula (=3.0.0)

@sideway/formula NPM version =3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @sideway/formula and may be impacted: - fast2render =4.1.67, =4.1.79 Source cves: CVE-2023-25166 Source advisory: OSV:GHSA-C2JC-4FPR-4VHG...