Ecosyste.ms: Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

Security Advisories: GSA_kwCzR0hTQS02Zng4LWg3am0tNjYzas4ABDbG

parse-uri Regular expression Denial of Service (ReDoS)

An issue in parse-uri v1.0.9 allows attackers to cause a Regular expression Denial of Service (ReDoS) via a crafted URL.

Permalink: https://github.com/advisories/GHSA-6fx8-h7jm-663j
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS02Zng4LWg3am0tNjYzas4ABDbG
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Moderate
Classification: General
Published: 2 days ago
Updated: about 10 hours ago


EPSS Percentage: 0.00043
EPSS Percentile: 0.11287

Identifiers: GHSA-6fx8-h7jm-663j, CVE-2024-36751
References: Repository: https://github.com/Kikobeats/parse-uri
Blast Radius: 0.0

Affected Packages

npm:parseuri
Dependent packages: 142
Dependent repositories: 144,638
Downloads: 5,735,032 last month
Affected Version Ranges: < 2.0.0
No known fixed version
All affected versions: 0.0.1, 0.0.2, 0.0.3, 0.0.4, 0.0.5, 0.0.6
npm:parse-uri
Dependent packages: 34
Dependent repositories: 4,572
Downloads: 279,551 last month
Affected Version Ranges: <= 1.0.9
No known fixed version
All affected versions: 1.0.0, 1.0.2, 1.0.3, 1.0.4, 1.0.5, 1.0.6, 1.0.7, 1.0.8, 1.0.9