GitHub Advisoryadvisory · npm

GHSA-j8xg-fqg3-53r7 word-wrap vulnerable to Regular Expression Denial of Service

MEDIUM Published 2023-06-22 Modified 2025-02-13 Official page ↗
Aliases
CVE-2023-26115
Ecosystem
npm
Packages
word-wrap
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Weaknesses
CWE-1333
Reviewed
2023-06-23

Affected packages

• npm word-wrap: < 1.2.4 → fixed in 1.2.4

Description

All versions of the package word-wrap are vulnerable to Regular Expression Denial of Service (ReDoS) due to the usage of an insecure regular expression within the result variable.

Related

Alias · CVE (1)

  • CVE-2023-26115 All versions of the package word-wrap are vulnerable to Regular Expression Denial of Service (ReDoS) due to the usage of an insecure… vulnerability

Weakness · CWE (1)

  • CWE-1333 Inefficient Regular Expression Complexity weakness

References