CVE-2021-23362

Published
View on NVD ↗
CVSS v3
5.3
MEDIUM
CVSS v2
5
MEDIUM
Affected
1
PROJECT

Description

The package hosted-git-info before 3.0.8 are vulnerable to Regular Expression Denial of Service (ReDoS) via regular expression shortcutMatch in the fromUrl function in index.js. The affected regular expression exhibits polynomial worst-case time complexity.

npm/hosted-git-info
npm/hosted-git-info
Provides metadata and conversions from repository urls for Github, Bitbucket and Gitlab
GitHubGitHub
236