Lucene search
+L

1 matches found

OSV
OSV
added 5 days ago5 views

GHSA-V245-V573-V5VM linkify-it: Quadratic-complexity DoS via the `mailto:` validator scan-loop on attacker text

Summary linkify-it's schema-scan loop .test / .match, the documented public API invokes the mailto: schema validator at every mailto: occurrence in the input text. For each occurrence the validator does text.slicepos an On copy and runs an email regex whose local-part class srcemailname greedily...

7.5CVSS5.7AI score0.00342EPSS
SaveExploits0References5
Rows per page
Query Builder