Submit #585796: @tarojs/taro 4.1.1 Inefficient Regular Expression Complexityinfo

Title@tarojs/taro 4.1.1 Inefficient Regular Expression Complexity
Description@tarojs/taro 4.1.1 allows context-dependent attackers to cause a regular expression denial of service by embedding maliciously constructed code blocks in the parsed Markdown code.
Source⚠️ https://github.com/NervJS/taro/pull/17619
User
 mmmsssttt (UID 85832)
Submission05/28/2025 07:13 (1 Year ago)
Moderation06/09/2025 08:53 (12 days later)
StatusAccepted
VulDB entry311668 [tarojs taro up to 4.1.1 index.js redos]
Points15

◂ PreviousOverviewNext ▸

Interested in the pricing of exploits?

See the underground prices here!