| शीर्षक | vercel hyper >=18.2.79 Inefficient Regular Expression Complexity |
|---|
| विवरण | This report details multiple Regular Expression Denial of Service (ReDoS) vulnerabilities found in the rimraf-standalone.js script within the Hyper terminal repository. Specific regular expressions used for parsing glob patterns and comments are susceptible to catastrophic backtracking when processing maliciously crafted input strings. This can lead to excessive CPU consumption, effectively causing a denial of service.
This advisory provides proof-of-concept attack strings for each vulnerability and proposes fixes using lookaheads to mitigate the ReDoS risk. |
|---|
| स्रोत | ⚠️ https://github.com/vercel/hyper/issues/8098 |
|---|
| उपयोगकर्ता | DayShift (UID 80963) |
|---|
| सबमिशन | 22/06/2025 03:50 PM (1 वर्ष पहले) |
|---|
| संयम | 04/07/2025 06:47 PM (12 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 314973 [vercel hyper तक 3.4.1 rimraf-standalone.js expand/braceExpand/ignoreMap सेवा अस्वीकार] |
|---|
| अंक | 20 |
|---|