Description
An issue in parse-uri v1.0.9 allows attackers to cause a Regular expression Denial of Service (ReDoS) via a crafted URL.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | parse-uri | <= 1.0.9 | — | GHSA-6fx8-h7jm-663j |
| npm | parseuri | all versions | — | GHSA-6fx8-h7jm-663j |