Submeter #617593: prettier <=3.6.2 Inefficient Regular Expression Complexityinformação

Títuloprettier <=3.6.2 Inefficient Regular Expression Complexity
DescriçãoA potential Regular Expression Denial of Service (ReDoS) vulnerability has been identified in src/language-css/parser-postcss.js. The regular expression used to parse custom selectors can be exploited by a specially crafted input string, leading to catastrophic backtracking and causing the application to hang.
Fonte⚠️ https://github.com/prettier/prettier/issues/17737
Utilizador
 DayShift (UID 80963)
Submissão17/07/2025 08h02 (há 1 Ano)
Moderação26/07/2025 18h31 (9 days later)
EstadoAceite
Entrada VulDB317851 [prettier até 3.6.2 parser-postcss.js parseNestedCSS node Negação de Serviço]
Pontos17

Interested in the pricing of exploits?

See the underground prices here!