Description
A Regular Expression vulnerability was found in nwmatcher before 1.4.4. The fix replacing multiple repeated instances of the “\s*” pattern.
Recommendation
Update the nwmatcher package to the latest compatible version. Followings are version details:
- Affected version(s): < 1.4.4
- Patched version(s): 1.4.4
References
Related Issues
- Regular Expression Denial of Service (GHSA-qx4v-6gc5-f2vv) - Vulnerability
- Regular Expression Denial of Service in marked (GHSA-ch52-vgq2-943f) - Vulnerability
- Regular Expression Denial of Service (ReDoS) in lodash (GHSA-29mw-wpgm-hmr9) - CVE-2020-28500
- Regular Expression Denial of Service (ReDoS) in lodash (GHSA-29mw-wpgm-hmr9) 3 - CVE-2020-28500
- Tags:
- npm
- nwmatcher
Anything's wrong? Let us know Last updated on January 09, 2023