code-server is vulnerable to regular expression denial of service. An attacker is able to send a malicious string which require extensive processing of regex machine, leading to an application crash.
CPE | Name | Operator | Version |
---|---|---|---|
code-server | le | 3.11.1 | |
code-server | le | 3.11.1 |