s3-url-parser vulnerable to Denial of Service via regexes component · CVE-2024-25355 · GitHub Advisory Database · GitHub

s3-url-parser vulnerable to Denial of Service via regexes component

Moderate severity GitHub Reviewed Published May 1, 2024 to the GitHub Advisory Database • Updated May 3, 2024

Package

s3-url-parser (npm)

Affected versions

= 1.0.3

Patched versions

None

Description

s3-url-parser 1.0.3 is vulnerable to denial of service via the regexes component.

References

Published by the National Vulnerability Database

May 1, 2024

Published to the GitHub Advisory Database May 1, 2024

Reviewed May 3, 2024

Last updated May 3, 2024