Skip to content
OpenAdvisories

Package · npm

is_js

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.5
    CVE-2020-26302

    is_js vulnerable to Regular Expression Denial of Service

    is.js is a general-purpose check library. Versions 0.9.0 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service (ReDoS). is.js uses a regex copy-pasted from a gist to validate URLs. Trying to validate a m…

    arasatasaygin is.js is_js npm