org.webjars.bowergithub.bestiejs:platform.js@1.3.5 vulnerabilities
-
latest version
1.3.5
-
first published
6 years ago
-
latest version published
4 years ago
-
licenses detected
- [1.3.4,)
-
package manager
Direct Vulnerabilities
Known vulnerabilities in the org.webjars.bowergithub.bestiejs:platform.js package. This does not include vulnerabilities belonging to this package’s dependencies.
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.| Vulnerability | Vulnerable Version |
|---|---|
platform.js is a platform detection library. Affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS).
The following regular expression used in unescapeHTML is vulnerable:
The slowdown is moderately low: for 50.000 characters around 2 seconds matching time. How to fix Regular Expression Denial of Service (ReDoS)? There is no fix version for |
(,)
|