Lucene search
+L

1 matches found

OSV
OSV
added 2023/09/27 8:16 p.m.10 views

GHSA-4Q6P-R6V2-JVC5 Chaijs/get-func-name vulnerable to ReDoS

The current regex implementation for parsing values in the module is susceptible to excessive backtracking, leading to potential DoS attacks. The regex implementation in question is as follows: js const functionNameMatch = /\sfunction?:\s|\s/^?:/+\/\s^\s/+/; This vulnerability can be exploited...

7.5CVSS6.8AI score0.01114EPSS
SaveExploits1References5
Rows per page
Query Builder