uri-template-lite
NPM
Releases22
Frequency5 months 1 week
Last Release
URI Template [RFC 6570] expansion and extraction
CVE History
| CVE | Affected | Published | CVSS v3 | CVSS v2 |
|---|---|---|---|---|
| all versions, < 22.9.0 | 5.9 MEDIUM | — | ||
An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the uri-template-lite npm package, when an attacker is able to supply arbitrary input to the "URI.expand" method | ||||