What is GHSA-6394-6h9h-cfjg?

GHSA-6394-6h9h-cfjg is a security advisory published by GitHub Security Advisories with Medium severity. Regular Expression Denial of Service

Why does GHSA-6394-6h9h-cfjg have no CVE ID yet?

GitHub Security Advisories published this advisory directly to customers before NVD assigned a CVE ID. This is the embargo-window disclosure pattern — vendors notify customers on day 0; NVD's public record follows days to weeks later.

Which products are affected by GHSA-6394-6h9h-cfjg?

GHSA-6394-6h9h-cfjg affects 1 product, including: npm/nwmatcher:\u003c 1.4.4.

GHSA-6394-6h9h-cfjgMediumDisclosed before NVD

Regular Expression Denial of Service

Vendor

GitHub Security Advisories

Published

June 7, 2019

Last Modified

January 9, 2023

📋 Description

A Regular Expression vulnerability was found in nwmatcher before 1.4.4. The fix replacing multiple repeated instances of the "\s*" pattern.

🎯 Affected products1

npm/nwmatcher:< 1.4.4

🔗 References (2)

https://github.com/dperini/nwmatcher/commit/9dcc2b039beeabd18327a5ebaa537625872e16f0
https://github.com/advisories/GHSA-6394-6h9h-cfjg