CVE-2022-1929

5.9

MEDIUMCVSS v3

Published

June 2, 2022

CVSS v2

5 MEDIUM

Affected

4 projects

Assigned by

[email protected]

Severity scale

010

Description

An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the devcert npm package, when an attacker is able to supply arbitrary input to the certificateFor method

devcert

NPMGenerate trusted local SSL/TLS certificates for local SSL development

< 1.2.1NVD

@expo/devcert

NPMGenerate trusted local SSL/TLS certificates for local SSL development

< 1.2.1NVD

davewasmer/devcert

GitHub

More on this CVE

NVD↗GitHub Advisory↗

Local HTTPS development made easy

< 1.2.1NVD

expo/devcert

GitHubLocal HTTPS development made easy

< 1.2.1NVD

Security Advisories

CVE-2022-1929

Description

More on this CVE