Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:5169
HistorySep 26, 2017 - 5:32 a.m.

Regular Expression Denial Of Service (ReDoS)

2017-09-2605:32:24
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8

0.001 Low

EPSS

Percentile

43.2%

slug is vulnerable to regular expression denial of service (ReDoS) attacks. The library does not limit the type of characters that get parsed, allowing a malicious user to pass a string to the application to cause a ReDoS.

CPENameOperatorVersion
slugle0.9.1
slugle0.9.1

0.001 Low

EPSS

Percentile

43.2%