CVE-2021-23362 — Regular Expression Denial of Service (ReDoS)
The package hosted-git-info before 3.0.8 are vulnerable to Regular Expression Denial of Service (ReDoS) via regular expression shortcutMatch in the fromUrl function in index.js.…
Published: 2021-03-23 · CVSS: 5.3 · CVSS 3.1
The package hosted-git-info before 3.0.8 are vulnerable to Regular Expression Denial of Service (ReDoS) via regular expression shortcutMatch in the fromUrl function in index.js. The affected regular expression exhibits polynomial worst-case time complexity.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7