url-regex-safe

url-regex-safe Espressione regolare per il matching degli URL. Versione mantenuta, sicura e compatibile con i browser di url-regex. Risolve CVE-2020-7661 per i server Node.js. Funziona in Node v14+ e nei browser. Mantenuta perSpam Scanner e Forward Email...

Regular Expression Denial of Service

Overview All versions of url-regex are vulnerable to a Regular Expression Denial of Service. An attacker providing a very long string in String.test can cause a Denial of Service. Recommendation There are no patches and the software is not currently maintained. The security researcher who found t...