83 matches found
GHSA-GM3R-Q2WP-HW87 Shescape: Quadratic-time denial of service in the flag-protection
Impact This impacts users of Shescape that have flag protection enabled, which is on by default, regardless of the API being used. An attacker can cause a runtime quadratic in the input size, causing denial of service for large inputs. javascript import Shescape from "shescape"; // 1. Prerequisit...
8.7CVSS5.8AI score0.00336EPSS
SaveExploits0References9
20