Regular Expression Denial Of Service (ReDoS)

string.js is vulnerable to regular expression denial of service (ReDoS) attacks. The library does not restrict the type of characters that get parsed, allowing a malicious user to pass a string to cause a ReDoS.