Regular Expression Denial of Service (GHSA-6394-6h9h-cfjg)

Description

A Regular Expression vulnerability was found in nwmatcher before 1.4.4. The fix replacing multiple repeated instances of the “\s*” pattern.

Recommendation

Update the nwmatcher package to the latest compatible version. Followings are version details:

• Affected version(s): < 1.4.4
• Patched version(s): 1.4.4

References

• GHSA-6394-6h9h-cfjg
• CWE-400

Related Issues

• Finance.js vulnerable to DoS via the seekZero() parameter - CVE-2025-56572
• Stimulsoft Dashboard.JS directory traversal vulnerability - CVE-2024-24398
• Inefficient Regular Expression Complexity in handsontable - CVE-2021-23446
• Regular Expression Denial of Service in jquery-validation - CVE-2021-21252

Tags:

npm

nwmatcher