CVE-2022-1929
5.9MEDIUMAn exponential ReDoS (Regular Expression Denial of Service) can be triggered in the devcert npm package, when an attacker is able to supply arbitrary input to the certificateFor method
Publicado: 6/2/2022Atualizado: 11/21/2024
Descrição
An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the devcert npm package, when an attacker is able to supply arbitrary input to the certificateFor method
Análise IADesenvolvido por IA
Produtos Afetados
devcert_projectdevcert
Referências
- https://research.jfrog.com/vulnerabilities/devcert-redos-xray-211352/ExploitThird Party Advisory
- https://research.jfrog.com/vulnerabilities/devcert-redos-xray-211352/ExploitThird Party Advisory