1 matches found
GHSA-V245-V573-V5VM linkify-it: Quadratic-complexity DoS via the `mailto:` validator scan-loop on attacker text
Summary linkify-it's schema-scan loop .test / .match, the documented public API invokes the mailto: schema validator at every mailto: occurrence in the input text. For each occurrence the validator does text.slicepos an On copy and runs an email regex whose local-part class srcemailname greedily...