Description
The uglify-js package before 2.6.0 for Node.js allows attackers to cause a denial of service (CPU consumption) via crafted input in a parse call, aka a "regular expression denial of service (ReDoS)."
Remediation
References
http://www.openwall.com/lists/oss-security/2016/04/20/11
http://www.securityfocus.com/bid/96409
https://nodesecurity.io/advisories/48
Related Vulnerabilities
CVE-2023-22899 Vulnerability in maven package net.lingala.zip4j:zip4j
CVE-2020-6463 Vulnerability in maven package org.webjars.npm:electron
CVE-2021-27644 Vulnerability in maven package org.apache.dolphinscheduler:dolphinscheduler-server
CVE-2020-5497 Vulnerability in maven package org.mitre:openid-connect-server-webapp
CVE-2019-8331 Vulnerability in maven package org.webjars.bowergithub.twbs:bootstrap