Astra Linux – Vulnerability in prototypejs

A issue was discovered in the stripTags and unescapeHTML components of Prototype 1.7.3. An attacker can cause a Regular Expression Denial of Service ReDOS by stripping crafted HTML tags...

DEBIAN-CVE-2020-27511

An issue was discovered in the stripTags and unescapeHTML components in Prototype 1.7.3 where an attacker can cause a Regular Expression Denial of Service ReDOS through stripping crafted HTML tags...

CVE-2020-27511

An issue was discovered in the stripTags and unescapeHTML components in Prototype 1.7.3 where an attacker can cause a Regular Expression Denial of Service ReDOS through stripping crafted HTML tags...

CVE-2020-27511

An issue was discovered in the stripTags and unescapeHTML components in Prototype 1.7.3 where an attacker can cause a Regular Expression Denial of Service ReDOS through stripping crafted HTML tags...

CVE-2020-27511: Undefined Security Weakness

An issue was discovered in the stripTags and unescapeHTML components in Prototype 1.7.3 where an attacker can cause a Regular Expression Denial of Service ReDOS through stripping crafted HTML tags...

PT-2021-11398

Name of the Vulnerable Software and Affected Versions: Prototype version 1.7.3 Description: An issue was discovered in the stripTags and unescapeHTML components where an attacker can cause a Regular Expression Denial of Service ReDOS through stripping crafted HTML tags. Recommendations: For...

GHSA-V2P6-4MP7-3R9V Regular Expression Denial of Service in underscore.string

Versions of underscore.string prior to 3.3.5 are vulnerable to Regular Expression Denial of Service ReDoS. The function unescapeHTML is vulnerable to ReDoS due to an overly-broad regex. The slowdown is approximately 2s for 50,000 characters but grows exponentially with larger inputs. Recommendati...

Regular Expression Denial of Service in underscore.string

Versions of underscore.string prior to 3.3.5 are vulnerable to Regular Expression Denial of Service ReDoS. The function unescapeHTML is vulnerable to ReDoS due to an overly-broad regex. The slowdown is approximately 2s for 50,000 characters but grows exponentially with larger inputs. Recommendati...

PT-2019-20068

Name of the Vulnerable Software and Affected Versions underscore.string versions prior to 3.3.5 Description The issue concerns a Regular Expression Denial of Service ReDoS in the unescapeHTML function due to an overly-broad regex. This results in a slowdown that grows exponentially with larger...

Regular Expression Denial of Service

Overview Versions of underscore.string prior to 3.3.5 are vulnerable to Regular Expression Denial of Service ReDoS. The function unescapeHTML is vulnerable to ReDoS due to an overly-broad regex. The slowdown is approximately 2s for 50,000 characters but grows exponentially with larger inputs...

PT-2018-6143

Name of the Vulnerable Software and Affected Versions: string affected versions not specified Description: The issue concerns a regular expression denial of service that occurs when specifically crafted untrusted user input is passed into the underscore or unescapeHTML methods of the string modul...

CVE-2017-16116: Uncontrolled Resource Consumption

The string module is a module that provides extra string operations. The string module is vulnerable to regular expression denial of service when specifically crafted untrusted user input is passed into the underscore or unescapeHTML methods...