Description
The no-case module is vulnerable to regular expression denial of service. When malicious untrusted user input is passed into no-case it can block the event loop causing a denial of service condition.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HackerOne | no-case node module | <2.3.2 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | no-case | < 2.3.2 | 2.3.2 | GHSA-ff6r-5jwm-8292 |