-
-
Notifications
You must be signed in to change notification settings - Fork 2.3k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
ReDoS in isSlug #1596
Labels
Comments
3 tasks
Is this planned to be included in a specific release in the next few weeks? |
Sure, we will be making a release before the end of this month @mikeguta |
Hi @profnandaa, looks like the release schedule has moved up. Do you know when the next release (including this fix) is due? |
This was referenced Oct 28, 2021
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Describe the bug
It allows cause a Regular Expression Denial of Service (REDoS) when checking if the crafted string is of type slug.
Examples
Additional context
Validator.js version: 14.10.0
Node.js version:
OS platform: windows
The text was updated successfully, but these errors were encountered: