npm/is-url CVE-2018-25079: high 7.5, EPSS 0.95%
is-url Inefficient Regular Expression Complexity vulnerability
Action: Upgrade is-url to 1.2.3 or later.
npm i is-url@1.2.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.2.3 | - |
Fixed versions
| 1.2.3 |
Sources
- osv: GHSA-p9w8-2mpq-49h9
- https://nvd.nist.gov/vuln/detail/CVE-2018-25079
- https://github.com/segmentio/is-url/pull/18
- https://github.com/segmentio/is-url/commit/149550935c63a98c11f27f694a7c4a9479e53794
- https://github.com/segmentio/is-url
- https://github.com/segmentio/is-url/releases/tag/v1.2.3
- https://vuldb.com/?ctiid.220058
- https://vuldb.com/?id.220058
CVE-2018-25079 · published · modified · JSON