Skip to content
OpenAdvisories
High · 7.5 CVE-2024-39249 EUVD-2024-37879GHSA-x6xm-h7hm-7p9q

Async <= 2.6.4 and <= 3.2.5 are vulnerable to ReDoS (Regular Expression Denial of Service) while parsing function in autoinject function. N…

Published Jul 1, 2024 · Updated Aug 26, 2024 · Assigned by mitre

Description

Async <= 2.6.4 and <= 3.2.5 are vulnerable to ReDoS (Regular Expression Denial of Service) while parsing function in autoinject function. NOTE: this is disputed by the supplier because there is no realistic threat model: regular expressions are not used with untrusted input.

Advisories 1

References