Regular Expression Denial Of Service (ReDoS)

2020-06-0502:14:18

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

41.2%

JSON

url-regex is vulnerable to Regular Expression Denial of Service (ReDoS). The attackers can send requests with very long strings to String.test to trigger an application crash by exhausting memory and high processing power.

CPENameOperatorVersion
url-regexle5.0.0
url-regexeq3.2.0

CPE	Name	Operator	Version
	url-regex	le	5.0.0
	url-regex	eq	3.2.0

References

github.com/kevva/url-regex/issues/70

npmjs.com/advisories/1550

0.001 Low

EPSS

Percentile

41.2%

JSON

Related for VERACODE:25612