Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Url-regex Project Component: Url-regex Clear all filters
TI-2022-05591 CVE-2022-21195 · GHSA-hg3w-7hj9-m3f7

Regular expression denial of service (ReDoS) in url-regex

Priority LOW 36

All versions of package url-regex are vulnerable to Regular Expression Denial of Service (ReDoS) which can cause the CPU usage to crash.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01361 Published 2022-05-20 No fix listed CWE-1333
TI-2020-06181 CVE-2020-7661 · GHSA-v4rh-8p82-6h5w

Uncontrolled resource consumption in url-regex

Priority LOW 38

all versions of url-regex are vulnerable to Regular Expression Denial of Service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0267 Published 2020-06-04 No fix listed CWE-400