Description
All versions of foreman are vulnerable to Regular Expression Denial of Service when requests to it are made with a specially crafted path.
Recommendation
Update the foreman package to the latest compatible version. Followings are version details:
- Affected version(s): < 3.0.1
- Patched version(s): 3.0.1
References
Related Issues
- Regular Expression Denial of Service in millisecond - Vulnerability
- Denial of Service in serialize-to-js - Vulnerability
- Denial of Service in rgb2hex - Vulnerability
- Regular Expression Denial of Service in clean-css - Vulnerability
You might also like:
- Tags:
- npm
- foreman
Anything's wrong? Let us know
Last updated on January 09, 2023