Skip to content
OpenAdvisories

Product · HackerOne

slug node module

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium —
    CVE-2017-16117

    Regular Expression Denial of Service in slug

    slug is a module to slugify strings, even if they contain unicode. slug is vulnerable to regular expression denial of service is specially crafted untrusted input is passed as input. About 50k characters can block the event loop for 2 seconds.

    HackerOne slug node module slug npm