TI-2021-19302 CVE-2021-43309 · GHSA-chw2-6c7r-37p7
ReDoS in uri-template-lite URI.expand function
Priority LOW 35
An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the uri-template-lite npm package, when an attacker is able to supply arbitrary input to the "URI.expand" method