Threats Tagged 'ghsa-x4hg-hfwf-p9mw'
View all threats tagged with 'ghsa-x4hg-hfwf-p9mw'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'ghsa-x4hg-hfwf-p9mw'
Click on any threat for detailed analysis and mitigation recommendations
GHSA-x4hg-hfwf-p9mw: @asymmetric-effort/nogginlessdom vulnerable to ReDoS via user-controlled regex in HTMLInputElement pattern validation 0 The @asymmetric-effort/nogginlessdom package versions prior to 0.0.22 contain a vulnerability in the HTMLInputElement.checkValidity() method. This method constructs a regular expression directly from the user-controlled pattern property without sanitization or timeout protection, enabling a Regular Expression Denial of Service (ReDoS) attack via catastrophic backtracking. The issue was fixed by adding a pattern length limit and nested quantifier detection to reject unsafe patterns before regex construction. Join the discussion | GCVE Database | 07/02/2026, 20:20:04 UTC Added: 07/02/2026, 22:56:51 UTC |
Showing 1 to 1 of 1 result