Description
The no-case module is vulnerable to regular expression denial of service. When malicious untrusted user input is passed into no-case it can block the event loop causing a denial of service condition.
Remediation
References
https://github.com/blakeembrey/no-case/issues/17
https://nodesecurity.io/advisories/529
Related Vulnerabilities
CVE-2019-19771 Vulnerability in npm package coinstrig
CVE-2020-15138 Vulnerability in maven package org.webjars.npm:prismjs
CVE-2011-2894 Vulnerability in maven package org.springframework:spring-core
CVE-2022-23305 Vulnerability in maven package log4j:log4j
CVE-2019-13127 Vulnerability in maven package org.webjars.npm:mxgraph