CVE-2021-43309

An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the uri-template-lite npm package, when an attacker is able to supply arbitrary input to the "URI.expand" method > MITRE Terms of Use apply – see LICENSE‑MITRE.txt