Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:36177
HistoryJun 28, 2022 - 4:20 a.m.

Regular Expression Denial Of Service (ReDoS)

2022-06-2804:20:59
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
17

0.001 Low

EPSS

Percentile

37.0%

repo-git-downloader is vulnerable to regular expression denial of service. The vulnerability exists due to the insecure regex pattern used for match repository urls in the getOptions function of option.js, allowing an attacker to crash the application by downloading maliciously crafted git repositories.

0.001 Low

EPSS

Percentile

37.0%

Related for VERACODE:36177