Github · Uri.Js · CVE-2017-16021
Name of the Vulnerable Software and Affected Versions:
uri-js versions 2.1.1 and earlier
Description:
The issue arises from a regular expression used by uri-js to validate URLs, which is vulnerable to redos. This vulnerability causes the program to hang and results in 100% CPU usage when attempting to validate a supplied URL. It affects situations where user input is passed to the `parse()` method.
Recommendations:
For uri-js versions 2.1.1 and earlier, update to v3.0.0 or later.