CVE-2020-36830
1 advisory.
npm/urlregex CVE-2020-36830: medium 4.3, EPSS 0.80%
ReDoS in urlregex
Action: Upgrade urlregex to 0.5.1 or later.
npm i urlregex@0.5.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.5.1 | - |
Fixed versions
| 0.5.1 |
Sources
- osv: GHSA-rw72-v6c7-hf9r
- https://nvd.nist.gov/vuln/detail/CVE-2020-36830
- https://github.com/nescalante/urlregex/pull/8
- https://github.com/nescalante/urlregex/commit/e5a085afe6abfaea1d1a78f54c45af9ef43ca1f9
- https://github.com/nescalante/urlregex
- https://github.com/nescalante/urlregex/releases/tag/v0.5.1
- https://vuldb.com/?ctiid.276269
- https://vuldb.com/?id.276269
CVE-2020-36830 · published · modified · JSON