Skip to content
OpenAdvisories

Product · HackerOne

uri-js node module

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2017-16021

    Regular Expression Denial Of Service in uri-js

    uri-js is a module that tries to fully implement RFC 3986. One of these features is validating whether or not a supplied URL is valid or not. To do this, uri-js uses a regular expression, This regular expression is vulnerable to redos. This causes the program…

    HackerOne uri-js node module uri-js npm