GitHub Advisoryadvisory · npm

GHSA-p8pc-3f7w-jr5q Foundation Regular Expression Denial of Service vulnerability

MEDIUM Published 2024-10-26 Modified 2024-11-13 Official page ↗

Aliases: CVE-2020-26304
Ecosystem: npm
Packages: foundation-sites
Severity: Moderate
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses: CWE-1333
Reviewed: 2024-10-28

Affected packages

• npm foundation-sites: <= 6.3.3 (no fix yet)

Description

Foundation is a front-end framework. Versions 6.3.3 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service (ReDoS). As of time of publication, it is unknown if any fixes are available.

Alias · CVE (1)

CVE-2020-26304 Foundation is a front-end framework. vulnerability

Weakness · CWE (1)

CWE-1333 Inefficient Regular Expression Complexity weakness

References