litejs/uri-template-lite

litejs/uri-template-lite

Releases5
Frequency10 months 5 days
Last Release
Stars21
URI Template RFC 6570 expansion and extraction

CVE History

CVEAffectedPublishedCVSS v3CVSS v2
all versions, < 22.9.05.9 MEDIUM

An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the uri-template-lite npm package, when an attacker is able to supply arbitrary input to the "URI.expand" method