Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:6662
HistoryJun 07, 2018 - 3:42 p.m.

Regular Expression Denial Of Service (ReDoS)

2018-06-0715:42:41
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3

0.001 Low

EPSS

Percentile

43.2%

no-case is vulnerable to regular expression denial of service (ReDoS) attacks. The library does not properly sanitize user input strings, causing slowdown when matching strings that can lead to a ReDoS.

CPENameOperatorVersion
no-casele2.3.1

0.001 Low

EPSS

Percentile

43.2%