Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Nescalante

#35660of 53,634
7.5Total CVSS
Vulnerabilities · 1
PT-2024-10840
7.5
2024-08-31
Nescalante · Url-Regex · CVE-2020-36830
**Name of the Vulnerable Software and Affected Versions** nescalante urlregex versions up to 0.5.0 **Description** A vulnerability was found in the nescalante urlregex component, affecting some unknown processing of the file index.js of the Backtracking component. The manipulation leads to inefficient regular expression complexity. The attack may be initiated remotely. **Recommendations** For versions up to 0.5.0, upgrade to version 0.5.1 to address this issue. As a temporary workaround, consider restricting the use of the vulnerable component until a patch is available.