← Back to CVE List

CVE-2021-23362

Published: 2021-03-23T17:15Z
Last Modified: 2024-11-21T05:51Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
The package hosted-git-info before 3.0.8 are vulnerable to Regular Expression Denial of Service (ReDoS) via regular expression shortcutMatch in the fromUrl function in index.js. The affected regular expression exhibits polynomial worst-case time complexity. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt