إرسال #617593: prettier <=3.6.2 Inefficient Regular Expression Complexityالمعلومات

عنوانprettier <=3.6.2 Inefficient Regular Expression Complexity
الوصفA potential Regular Expression Denial of Service (ReDoS) vulnerability has been identified in src/language-css/parser-postcss.js. The regular expression used to parse custom selectors can be exploited by a specially crafted input string, leading to catastrophic backtracking and causing the application to hang.
المصدر⚠️ https://github.com/prettier/prettier/issues/17737
المستخدم
 DayShift (UID 80963)
ارسال17/07/2025 08:02 AM (1 سنة منذ)
الاعتدال26/07/2025 06:31 PM (9 days later)
الحالةتمت الموافقة
إدخال VulDB317851 [prettier حتى 3.6.2 parser-postcss.js parseNestedCSS node الحرمان من الخدمة]
النقاط17

Do you need the next level of professionalism?

Upgrade your account now!