Regular Expression Denial of Service (ReDoS) in jsx-slack

Description

jsx-slack v4.5.1 and earlier versions are vulnerable to a regular expression denial-of-service (ReDoS) attack.

Recommendation

Update the jsx-slack package to the latest compatible version. Followings are version details:

• Affected version(s): < 4.5.1
• Patched version(s): 4.5.1

References

• GHSA-55xv-f85c-248q
• CVE-2021-43838
• CWE-1333
• CWE-400
• CAPEC-310
• OWASP 2021-A6

Related Issues

• Finance.js vulnerable to DoS via the seekZero() parameter - CVE-2025-56572
• Stimulsoft Dashboard.JS directory traversal vulnerability - CVE-2024-24398
• Inefficient Regular Expression Complexity in handsontable - CVE-2021-23446
• Regular Expression Denial of Service in jquery-validation - CVE-2021-21252

Tags:

npm

jsx-slack