Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-q5c4-39f5-m68j

Опубликовано: 24 июл. 2018
Источник: github
Github: Прошло ревью
CVSS3: 7.5

Описание

Regular Expression Denial of Service in decamelize

Affected versions of decamelize are susceptible to a denial of service vulnerability when user input is passed directly into decamelize.

Recommendation

Update to version 1.1.2 or later.

Пакеты

Наименование

decamelize

npm
Затронутые версииВерсия исправления

>= 1.1.0, <= 1.1.1

1.1.2

EPSS

Процентиль: 55%
0.00328
Низкий

7.5 High

CVSS3

Дефекты

CWE-400

Связанные уязвимости

CVSS3: 7.5
redhat
около 10 лет назад

Decamelize is used to convert a dash/dot/underscore/space separated string to camelCase. Decamelize 1.1.0 through 1.1.1 uses regular expressions to evaluate a string and takes unescaped separator values, which can be used to create a denial of service attack.

CVSS3: 7.5
nvd
больше 7 лет назад

Decamelize is used to convert a dash/dot/underscore/space separated string to camelCase. Decamelize 1.1.0 through 1.1.1 uses regular expressions to evaluate a string and takes unescaped separator values, which can be used to create a denial of service attack.

CVSS3: 7.5
debian
больше 7 лет назад

Decamelize is used to convert a dash/dot/underscore/space separated st ...

EPSS

Процентиль: 55%
0.00328
Низкий

7.5 High

CVSS3

Дефекты

CWE-400