Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Dotchevo

#40059of 53,632
6.8Total CVSS
Vulnerabilities · 1
PT-2018-6052
6.8
2018-06-04
Github · Uri.Js · CVE-2017-16021
Name of the Vulnerable Software and Affected Versions: uri-js versions 2.1.1 and earlier Description: The issue arises from a regular expression used by uri-js to validate URLs, which is vulnerable to redos. This vulnerability causes the program to hang and results in 100% CPU usage when attempting to validate a supplied URL. It affects situations where user input is passed to the `parse()` method. Recommendations: For uri-js versions 2.1.1 and earlier, update to v3.0.0 or later.