GitHub Advisoryadvisory · npm

GHSA-468q-v4jj-485h Inefficient Regular Expression Complexity in taro

HIGH Published 2021-09-20 Modified 2021-09-20 Official page ↗

Aliases: CVE-2021-3804
Ecosystem: npm
Packages: @tarojs/helper
Severity: High
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses: CWE-1333
Reviewed: 2021-09-20

Affected packages

• npm @tarojs/helper: < 3.3.9 → fixed in 3.3.9

Description

taro is vulnerable to Inefficient Regular Expression Complexity

Related

Alias · CVE (1)

CVE-2021-3804 taro is vulnerable to Inefficient Regular Expression Complexity vulnerability

Weakness · CWE (1)

CWE-1333 Inefficient Regular Expression Complexity weakness

References