Search vulnerabilities

Results 1

Export CSV
CVE-2021-43309

ReDoS in uri-template-lite URI.expand function

An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the uri-template-lite npm package, when an attacker is able to supply arbitrary input to the "URI.expand" method

CVSS 3.1 · 5.9 Medium EPSS 1.0% KEV · Not listed
Vendors