Closed
Description
Type of Issue
Potential Regex Denial of Service (ReDoS)
Description
The vulnerable regular expression is located in
Line 399 in 1a45e12
The ReDOS vulnerabilitiy of the regex is mainly due to the sub-pattern (\d+)\s*(\S+) and can be exploited with the following string
"1"*5000
I think you can limit the input length or modify this regex.
Metadata
Metadata
Assignees
Labels
No labels