GHSA-jxg6-fhwc-9v9c
Dashboard / Vulnerabilities / GHSA-jxg6-fhwc-9v9c
Summary: Regular Expression Denial of Service (ReDoS) in es6-crawler-detect
Details: This affects the package es6-crawler-detect before 3.1.3. No limitation of user agent string length supplied to regex operators.
References: https://nvd.nist.gov/vuln/detail/CVE-2020-28501, https://github.com/JefferyHus/es6-crawler-detect/pull/27, https://snyk.io/vuln/SNYK-JS-ES6CRAWLERDETECT-1051529
Affected packages
Package
Name: es6-crawler-detect
Purl: pkg:npm/es6-crawler-detect
Affected ranges
Type: SEMVER
Events:
Introduced- 0
Fixed -3.1.3
Affected versions
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
