Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:38814
HistoryJan 10, 2023 - 7:04 a.m.

Regular Expression Denial Of Service

2023-01-1007:04:16
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
43
regular expression
denial of service
debug
node.js
vulnerability
software

0.008 Low

EPSS

Percentile

81.3%

debug is vulnerable to Regular Expression Denial of Service (ReDoS). The vulnerability exists in useColors function of node.js due to inefficient regular expression complexity which allows an attacker to crash the application by submitting a malicious string.

0.008 Low

EPSS

Percentile

81.3%