Regular Expression Denial of Service (ReDoS)

ALTOGHSA-h6ch-v84p-w6p9 · Published 13/06/2019 · updated 10/09/2026

En resumen

GHSA-h6ch-v84p-w6p9 es una vulnerabilidad ALTO que afecta a diff.
Solución: actualizar a 3.5.0 o posterior.

Package	Affected versions	Patched versions
diff npm	`< 3.5.0`	`3.5.0`

Description

A vulnerability was found in diff before v3.5.0, the affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS) attacks.

References

kpdecker/jsdiff commit 2aec429 · WEB
bugzilla.redhat.com/show_bug.cgi · WEB
snyk.io/vuln/npm:diff:20180305 · WEB
npmjs.com/advisories/1631 · WEB
whitesourcesoftware.com/vulnerability-database/WS-2018-0590 · WEB

Más vulnerabilidades de diff

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free