CVE-2020-7661

Published June 4th, 2020

View on NVD ↗

CVSS v3

7.5

HIGH

CVSS v2

7.8

HIGH

Affected

PROJECT

Description

all versions of url-regex are vulnerable to Regular Expression Denial of Service. An attacker providing a very long string in String.test can cause a Denial of Service.

kevva/url-regex

Regular expression for matching URLs

GitHub

354