CVE-2020-7661
HIGH 7.5EPSS 2.7%
all versions of url-regex are vulnerable to Regular Expression Denial of Service. An attacker providing a very long string in String.test can cause a Denial of Service.
- Affected
- url-regex
- CVSS v3.1 NVD
- 7.5 HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS v2.0 NVD
- 7.8 HIGH
AV:N/AC:L/Au:N/C:N/I:N/A:C - EPSS
- 2.67% chance of exploitation in the next 30 days, 86th percentile
- Published
- 2020-06-04
- Updated
- 2024-08-04