Description
An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the uri-template-lite npm package, when an attacker is able to supply arbitrary input to the "URI.expand" method
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| uri-template-lite | uri-template-lite | < 22.9.0 | 22.9.0 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | uri-template-lite | < 22.9.0 | 22.9.0 | GHSA-chw2-6c7r-37p7 |