[Pkg-javascript-devel] Bug#891980: node-ssri: Regular Expression Denial of Service vulnerability in the strict mode functionality

Salvatore Bonaccorso carnil at debian.org
Sat Mar 3 15:43:15 UTC 2018


Source: node-ssri
Version: 5.0.0-1
Severity: important
Tags: patch security upstream
Forwarded: https://github.com/zkat/ssri/issues/10

Hi

See the following references for details:

https://github.com/zkat/ssri/commit/d0ebcdc22cb5c8f47f89716d08b3518b2485d65d
https://github.com/zkat/ssri/issues/10
https://nodesecurity.io/advisories/565

Regards,
Salvatore



More information about the Pkg-javascript-devel mailing list