~ / search / GHSA-333w-rxj3-f55r

GHSA-333w-rxj3-f55r

Regular Expression Denial Of Service in uri-js

Source: GitHub Advisory Database (reviewed) Moderate CVE-2017-16021

Packages

EcosystemPackageAffectedFixed in
npm uri-js < 3.0.0 3.0.0

Details

As written in the advisory (Markdown source, shown as plain text).

Affected versions of `uri-js` is susceptible to a regular expression denial of service vulnerability when user input is sent to the `.parse()` method. ## Recommendation Update to v3.0.0 or later.

References

External links from the advisory. They lead to third-party sites.