search

user28111999 / BigScreener

A free, anonymous and high quality streaming service
https://yunseok.dev/BigScreener
The Unlicense
2 stars 0 forks source link

Fix 'braces' security issue #1

Closed user28111999 closed 5 years ago

user28111999 commented 5 years ago

WS-2019-0019

Vulnerable versions: =< 2.3.1 Patched version: 2.3.1

Version of braces prior to 2.3.1 are vulnerable to Regular Expression Denial of Service (ReDoS). Untrusted input may cause catastrophic backtracking while matching regular expressions. This can cause the application to be unresponsive leading to Denial of Service.