Description
The no-case module is vulnerable to regular expression denial of service. When malicious untrusted user input is passed into no-case it can block the event loop causing a denial of service condition.
Remediation
References
https://nodesecurity.io/advisories/529
https://github.com/blakeembrey/no-case/issues/17
Related Vulnerabilities
CVE-2019-8331 Vulnerability in maven package org.webjars.bower:bootstrap
CVE-2022-40955 Vulnerability in maven package org.apache.inlong:manager-pojo
CVE-2020-10650 Vulnerability in maven package com.fasterxml.jackson.core:jackson-databind
CVE-2017-9804 Vulnerability in maven package org.apache.struts:struts2-core