npm/@asymmetric-effort/nogginlessdom: medium
@asymmetric-effort/nogginlessdom vulnerable to ReDoS via user-controlled regex in HTMLInputElement pattern validation
Action: Upgrade @asymmetric-effort/nogginlessdom to 0.0.22 or later.
npm i @asymmetric-effort/nogginlessdom@0.0.22Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.0.22 | - |
Fixed versions
| 0.0.22 |
Sources
- osv: GHSA-x4hg-hfwf-p9mw
- https://github.com/asymmetric-effort/NogginLessDom/security/advisories/GHSA-x4hg-hfwf-p9mw
- https://github.com/asymmetric-effort/NogginLessDom/commit/25a3cbac665fae5663f8b71c073b80c3152dbe7b
- https://github.com/asymmetric-effort/NogginLessDom
published · modified · JSON