New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Vuln: Inefficient regular expression complexity #935

Closed

mt3o opened this issue Jun 12, 2023 · 1 comment

mt3o commented Jun 12, 2023

Hi, there is a report for a vuln in the debug library.

In NPM debug, the enable function accepts a regular expression from user input without escaping it. Arbitrary regular expressions could be injected to cause a Denial of Service attack on the user's browser, otherwise known as a ReDoS (Regular Expression Denial of Service). This is a different issue than CVE-2017-16137.

https://devhub.checkmarx.com/cve-details/Cx8bc4df28-fcf5/

Any chance to fix it rather quickly?

The text was updated successfully, but these errors were encountered:

Member

Qix- commented Jun 13, 2023

Please search the issues before making new ones.

Qix- closed this as completed

debug-js locked as spam and limited conversation to collaborators

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.