Skip to content
OpenAdvisories
High · 8.7 CVE-2020-26305 EUVD-2024-3102GHSA-pmvv-57rg-5g86

GHSL-2020-291: Regular Expression Denial of Service (ReDoS) in CommonRegexJS

Published Oct 26, 2024 · Updated Oct 28, 2024 · Assigned by GitHub_M

Description

CommonRegexJS is a CommonRegex port for JavaScript. All available versions contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service (ReDoS). As of time of publication, no known patches are available.

Affected products

VendorProductAffectedFixed
talyssonoc CommonRegexJS — —

Affected packages

EcosystemPackageAffectedFixedRecord
npm commonregex <= 0.3.1 — GHSA-pmvv-57rg-5g86

References