Description
The no-case module is vulnerable to regular expression denial of service. When malicious untrusted user input is passed into no-case it can block the event loop causing a denial of service condition.
Remediation
References
https://github.com/blakeembrey/no-case/issues/17
https://nodesecurity.io/advisories/529
Related Vulnerabilities
CVE-2020-8124 Vulnerability in maven package org.webjars.npm:url-parse
CVE-2023-43794 Vulnerability in npm package nocodb
CVE-2021-28163 Vulnerability in maven package org.eclipse.jetty:jetty-deploy
CVE-2020-10719 Vulnerability in maven package io.undertow:undertow-core
CVE-2019-10754 Vulnerability in maven package org.apereo.cas:cas-server-support-oidc