CVE-2024-25355
1 advisory.
npm/s3-url-parser CVE-2024-25355: high 7.5
s3-url-parser vulnerable to Denial of Service via regexes component
Action: No fix published. Pin and monitor.
Affected
No affected ranges in the source.
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-r4q9-xx5g-j24p
- https://nvd.nist.gov/vuln/detail/CVE-2024-25355
- https://gist.github.com/6en6ar/a4977866c59cbcfc716f0f2717b812bf
- https://github.com/AntonioRecaldeRusso/s3-url-parser
- https://github.com/AntonioRecaldeRusso/s3-url-parser/blob/master/index.js
CVE-2024-25355 · published · modified · JSON