Description
An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the devcert npm package, when an attacker is able to supply arbitrary input to the certificateFor method
Remediation
References
https://research.jfrog.com/vulnerabilities/devcert-redos-xray-211352/
Related Vulnerabilities
CVE-2021-27884 Vulnerability in npm package yapi-vendor
CVE-2023-41037 Vulnerability in maven package org.webjars.npm:github-com-openpgpjs-openpgpjs
CVE-2023-41886 Vulnerability in maven package org.openrefine:database
CVE-2020-7691 Vulnerability in npm package jspdf
CVE-2023-3635 Vulnerability in maven package com.squareup.okio:okio