提交 #633486: yarn Yarn src/util/request-manager.js v1.22.22 Inefficient Regular Expression Complexity信息

标题yarn Yarn src/util/request-manager.js v1.22.22 Inefficient Regular Expression Complexity
描述Yarn v1.22.22 src/util/request-manager.js allows context-dependent attackers to cause a regular expression denial of service by embedding maliciously constructed code blocks in the parsed Markdown code.
来源⚠️ https://github.com/yarnpkg/yarn/pull/9203
用户
 mmmsssttt (UID 85832)
提交2025-08-13 05時58分 (7 月前)
管理2025-08-21 07時58分 (8 days later)
状态已接受
VulDB条目320913 [yarnpkg Yarn 直到 1.22.22 request-manager.js setOptions 拒绝服务]
积分16

◂ 上一步一览下一步 ▸

Interested in the pricing of exploits?

See the underground prices here!