Skip to content
OpenAdvisories

Vendor

yhatt

2 known vulnerabilities.

Products

jsx-slack 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2021-43843

    Insufficient patch for Regular Expression Denial of Service (ReDoS) to jsx-slack v4.5.1

    jsx-slack is a package for building JSON objects for Slack block kit surfaces from JSX. The maintainers found the patch for CVE-2021-43838 in jsx-slack v4.5.1 is insufficient tfor protection from a Regular Expression Denial of Service (ReDoS) attack. If an at…

    yhatt jsx-slack jsx-slack npm
  • Medium 5.3
    CVE-2021-43838

    Regular Expression Denial of Service (ReDoS) in jsx-slack

    jsx-slack is a library for building JSON objects for Slack Block Kit surfaces from JSX. In versions prior to 4.5.1 users are vulnerable to a regular expression denial-of-service (ReDoS) attack. If attacker can put a lot of JSX elements into `<blockquote>` tag…

    yhatt jsx-slack jsx-slack npm