Gửi #585727: @actions @actions/glob 0.5.0 Inefficient Regular Expression Complexitythông tin

tiêu đề@actions @actions/glob 0.5.0 Inefficient Regular Expression Complexity
Mô tả@actions/glob 0.5.0 allows context-dependent attackers to cause a regular expression denial of service by embedding maliciously constructed code blocks in the parsed Markdown code.
Nguồn⚠️ https://github.com/actions/toolkit/pull/2057
Người dùng
 mmmsssttt (UID 85832)
Đệ trình28/05/2025 04:45 (cách đây 1 Năm)
Kiểm duyệt09/06/2025 08:26 (12 days later)
Trạng tháiđược chấp nhận
Mục VulDB311661 [actions toolkit 0.5.0 glob internal-pattern.ts globEscape Từ chối dịch vụ]
điểm15

Want to know what is going to be exploited?

We predict KEV entries!