जमा करें #609704: chinese-poetry <=v0.1 Inefficient Regular Expression Complexityजानकारी

शीर्षकchinese-poetry <=v0.1 Inefficient Regular Expression Complexity
विवरणI have identified a Regular Expression Denial of Service (ReDoS) vulnerability in the rank/server.js file. The regular expression used to strip <script> and <style> tags can be exploited with a maliciously crafted string, causing the Node.js event loop to block and leading to a Denial of Service.
स्रोत⚠️ https://github.com/chinese-poetry/chinese-poetry/issues/396
उपयोगकर्ता
 DayShift (UID 80963)
सबमिशन05/07/2025 10:16 AM (1 वर्ष पहले)
संयम13/07/2025 09:50 AM (8 days later)
स्थितिस्वीकृत
VulDB प्रविष्टि316277 [chinese-poetry 0.1 rank/server.js सेवा अस्वीकार]
अंक18

Might our Artificial Intelligence support you?

Check our Alexa App!