제출 #617393: Yarn v1.22.22 Inefficient Regular Expression Complexity정보

제목Yarn v1.22.22 Inefficient Regular Expression Complexity
설명Yarn v1.22.22 allows context-dependent attackers to cause a regular expression denial of service by embedding maliciously constructed code blocks in the parsed Markdown code.
원천⚠️ https://github.com/yarnpkg/yarn/pull/9199
사용자
 mmmsssttt (UID 85832)
제출2025. 07. 16. PM 08:31 (1 년도 ago)
모더레이션2025. 07. 26. PM 06:24 (10 days later)
상태수락
VulDB 항목317850 [yarnpkg Yarn 까지 1.22.22 hosted-git-resolver.js explodeHostedGitFragment 서비스 거부]
포인트들15

◂ 이전개요다음 ▸

Interested in the pricing of exploits?

See the underground prices here!