~ / search / GHSA-jxg6-fhwc-9v9c

GHSA-jxg6-fhwc-9v9c

Regular Expression Denial of Service (ReDoS) in es6-crawler-detect

Source: GitHub Advisory Database (reviewed) Moderate CVE-2020-28501

Packages

EcosystemPackageAffectedFixed in
npm es6-crawler-detect < 3.1.3 3.1.3

Details

As written in the advisory (Markdown source, shown as plain text).

This affects the package es6-crawler-detect before 3.1.3. No limitation of user agent string length supplied to regex operators.

References

External links from the advisory. They lead to third-party sites.