Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:5838
HistoryFeb 22, 2018 - 12:12 a.m.

Regular Expression Denial Of Service (ReDoS)

2018-02-2200:12:34
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4

0.001 Low

EPSS

Percentile

46.8%

ssri is vulnerable to regular expression denial of service (ReDoS) attacks. If an application is using the opts.strict option, attackers can inject extremely long base64 hash strings to cause the application to hang.

CPENameOperatorVersion
ssrile5.2.1

0.001 Low

EPSS

Percentile

46.8%