| Titolo | @actions @actions/glob 0.5.0 Inefficient Regular Expression Complexity |
|---|
| Descrizione | @actions/glob 0.5.0 allows context-dependent attackers to cause a regular expression denial of service by embedding maliciously constructed code blocks in the parsed Markdown code. |
|---|
| Fonte | ⚠️ https://github.com/actions/toolkit/pull/2057 |
|---|
| Utente | mmmsssttt (UID 85832) |
|---|
| Sottomissione | 28/05/2025 04:45 (1 Anno fa) |
|---|
| Moderazione | 09/06/2025 08:26 (12 days later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 311661 [actions toolkit 0.5.0 glob internal-pattern.ts globEscape negazione del servizio] |
|---|
| Punti | 15 |
|---|