Description
nitrado.js is a type safe wrapper for the Nitrado API. Possible ReDoS with lib input of `{{` and with many repetitions of `{{|`. This issue has been patched in all versions above `0.2.5`. There are currently no known workarounds.
Remediation
References
https://github.com/cainthebest/nitrado.js/blob/v0.2.5/CHANGELOG.md
https://github.com/cainthebest/nitrado.js/security/advisories/GHSA-vqc4-v8hc-h2jg
Related Vulnerabilities
CVE-2021-33040 Vulnerability in npm package epubjs
CVE-2021-39232 Vulnerability in maven package org.apache.ozone:ozone-main
CVE-2021-45457 Vulnerability in maven package org.apache.kylin:kylin-server
CVE-2020-6462 Vulnerability in npm package electron
CVE-2020-2212 Vulnerability in maven package org.jenkins-ci.plugins:github-coverage-reporter