The vulnerability in Securly Chrome Extension version 3.0.7 involves insecure retrieval of config.json via HTTP and unsafe compilation of server-supplied patterns into RegExp objects without complexity checks. An attacker positioned on the network path can manipulate these patterns to trigger catastrophic backtracking in the regular expression engine, resulting in a denial of service condition that affects all browsing sessions using the extension.

An attacker with the ability to intercept network traffic can cause the extension to enter a state of catastrophic backtracking by injecting crafted regular expression patterns. This leads to denial of service on all browsing activities, impacting availability. There is no impact on confidentiality or integrity reported.

No official patch or remediation is currently available for this vulnerability. Users should monitor the vendor advisory for updates. As the extension downloads configuration over HTTP, using network protections such as HTTPS enforcement or VPNs may reduce exposure to on-path attackers, but no vendor-provided mitigation is confirmed.