ChaijsGet-func-name
1 matches found
CVE-2023-43646
CVE-2023-43646 affects the get-func-name module (NodeJS and browser) where versions before 2.0.1 are vulnerable to a Regular Expression Denial of Service (ReDoS) caused by imbalance in parentheses that triggers catastrophic backtracking and high CPU usage on malicious input (e.g., a tab-heavy str...
8.6CVSS7.7AI score0.01114EPSS
Save