إرسال #585727: @actions @actions/glob 0.5.0 Inefficient Regular Expression Complexityالمعلومات

عنوان@actions @actions/glob 0.5.0 Inefficient Regular Expression Complexity
الوصف@actions/glob 0.5.0 allows context-dependent attackers to cause a regular expression denial of service by embedding maliciously constructed code blocks in the parsed Markdown code.
المصدر⚠️ https://github.com/actions/toolkit/pull/2057
المستخدم
 mmmsssttt (UID 85832)
ارسال28/05/2025 04:45 AM (1 سنة منذ)
الاعتدال09/06/2025 08:26 AM (12 days later)
الحالةتمت الموافقة
إدخال VulDB311661 [actions toolkit 0.5.0 glob internal-pattern.ts globEscape الحرمان من الخدمة]
النقاط15

Do you need the next level of professionalism?

Upgrade your account now!