CVE-2021-43307

5.9MEDIUM

An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the semver-regex npm package, when an attacker is able to supply arbitrary input to the test() method

发布于: 6/2/2022更新于: 11/21/2024
在NVD查看在MITRE查看

描述

An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the semver-regex npm package, when an attacker is able to supply arbitrary input to the test() method

AI分析AI驱动

受影响产品

semver-regex_projectsemver-regex
semver-regex_projectsemver-regex

参考资料