GitHub Advisoryadvisory · npm

GHSA-h6ch-v84p-w6p9 Regular Expression Denial of Service (ReDoS)

HIGH Published 2019-06-13 Modified 2021-02-24 Official page ↗
Ecosystem
npm
Packages
diff
Severity
High
Weaknesses
CWE-400
Reviewed
2019-06-13

Affected packages

• npm diff: < 3.5.0 → fixed in 3.5.0

Description

A vulnerability was found in diff before v3.5.0, the affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS) attacks.

Related

Weakness · CWE (1)

  • CWE-400 Uncontrolled Resource Consumption weakness

References