| Package | Affected versions | Patched versions |
|---|---|---|
| slug | ≤ 0.9.1 | |
| slug | < 0.9.2 | 0.9.2 |
Affected versions of slug are vulnerable to a regular expression denial of service when parsing untrusted user input.
The issue is low severity, as it takes 50,000 characters to cause the event loop to block for 2 seconds,
About 50k characters can block the event loop for 2 seconds.
Update to version 0.9.2 or later.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free