SECURITY: CVE-2022-37620

kangax / html-minifier

Javascript-based HTML compressor/minifier (with Node.js support)

http://kangax.github.io/html-minifier/

MIT License

4.94k stars 571 forks source link

Open JSchermers opened 1 year ago

JSchermers commented 1 year ago

When running MEND we see this CVE-2022-37620

Seems like A Regular Expression Denial of Service (ReDoS) flaw

tnx for any help

runderworld commented 1 year ago

Duplicate of #1135