Threats tagged 'ghsa-phc2-88rx-x2mp'

anchorme versions up to 3.0.8 contain a regular expression denial of service (ReDoS) vulnerability in the IPv6 host extraction regex. This vulnerability arises from catastrophic backtracking in the regex engine when processing specially crafted input strings, which can block the Node.js event loop and cause denial of service.