CVE-2021-23362

CVE-2021-23362 affects the Node.js package hosted-git-info prior to 3.0.8. The vulnerability is a Regular Expression Denial of Service (ReDoS) in the fromUrl function, caused by a regex shortcutMatch that can exhibit polynomial worst-case time. Affected detail: Regular expression complexity leads...