Skip to content
OpenAdvisories

Package · npm

@chenglou/pretext

1 known vulnerabilities.

1 result · Feed

  • High —

    Pretext: Algorithmic Complexity (DoS) in the text analysis phase

    `isRepeatedSingleCharRun()` in `src/analysis.ts` (line 285) re-scans the entire accumulated segment on every merge iteration during text analysis, producing O(n²) total work for input consisting of repeated identical punctuation characters. An attacker who co…