Issues - External/card-drop - Vylpes Git

External/card-drop

New issue

[23] [LOW] Regular Expression Denial of Service (ReDoS) in @eslint/plugin-kit

#463 by Vylpes was closed 2026-03-13 18:00:49 +00:00 0.10.0

[22] [LOW] undici Denial of Service attack via bad certificate data

#462 by Vylpes was closed 2026-03-13 18:00:48 +00:00 0.10.0

[21] [MODERATE] Babel has inefficient RegExp complexity in generated code with .replace when transpiling named capturing groups

#461 by Vylpes was closed 2026-03-13 18:00:46 +00:00 0.10.0

[20] [MODERATE] Use of Insufficiently Random Values in undici

#460 by Vylpes was closed 2026-03-13 18:00:44 +00:00 0.10.0

[19] [HIGH] path-to-regexp contains a ReDoS

#459 by Vylpes was closed 2026-03-13 18:00:42 +00:00 0.10.0

[18] [HIGH] Regular Expression Denial of Service (ReDoS) in cross-spawn

27 minutes 23 seconds

#458 by Vylpes was closed 2026-03-13 18:00:28 +00:00 0.10.0 0.10 Sprint 3

[17] cookie accepts cookie name, path, and domain with out of bounds characters

#396 by Helpdesk was closed 2025-06-04 18:31:51 +01:00

[16] path-to-regexp outputs backtracking regular expressions

#395 by Helpdesk was closed 2025-06-04 18:31:51 +01:00

[15] send vulnerable to template injection that can lead to XSS

#394 by Helpdesk was closed 2025-06-04 18:31:51 +01:00

[14] serve-static vulnerable to template injection that can lead to XSS

#393 by Helpdesk was closed 2025-06-04 18:31:51 +01:00

[13] body-parser vulnerable to denial of service when url encoding is enabled

#370 by Helpdesk was closed 2025-06-04 18:31:51 +01:00

[12] express vulnerable to XSS via response.redirect()

#369 by Helpdesk was closed 2025-06-04 18:31:51 +01:00

[11] Regular Expression Denial of Service (ReDoS) in micromatch

#358 by Helpdesk was closed 2025-06-04 18:31:51 +01:00