GitHub Advisoryadvisory · npm

GHSA-pmvv-57rg-5g86 CommonRegexJS Regular Expression Denial of Service vulnerability

MEDIUM Published 2024-10-26 Modified 2024-11-13 Official page ↗
Aliases
CVE-2020-26305
Ecosystem
npm
Packages
commonregex
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-1333
Reviewed
2024-10-28

Affected packages

• npm commonregex: <= 0.3.1 (no fix yet)

Description

CommonRegexJS is a CommonRegex port for JavaScript. All available versions contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service (ReDoS). As of time of publication, no known patches are available.

Related

Alias · CVE (1)

  • CVE-2020-26305 CommonRegexJS is a CommonRegex port for JavaScript. vulnerability

Weakness · CWE (1)

  • CWE-1333 Inefficient Regular Expression Complexity weakness

References