Description
A regular expression denial of service (ReDoS) vulnerability in the validateBaseUrl function can cause the application to use excessive resources, become unresponsive, or crash. This was introduced in react-native version 0.59.0 and fixed in version 0.64.1.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| react-native | 0.59.0 – < unspecified | unspecified |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | react-native | >= 0.59.0, < 0.62.3 | 0.62.3 | GHSA-7f53-fmmv-mfjv |
| npm | react-native | >= 0.63.0, < 0.64.1 | 0.64.1 | GHSA-7f53-fmmv-mfjv |