Regular Expression Denial-of-Service in websocket-extensions
ID: 63f6241a-8552-59b7-abb7-8f823b2daf68
STIX ID: report--63f6241a-8552-59b7-abb7-8f823b2daf68
Feed Name: Snyk Blog
Threat Score
Snyk details a Regular Expression Denial-of-Service (ReDoS) vulnerability in the websocket-extensions package (CVE-2020-7662, CVE-2020-7663) discovered by Robert McLaughlin; Snyk validated the proof-of-concept, located the vulnerable code, coordinated CVE assignment and disclosure with the maintainer, and the maintainer released a fix promptly, demonstrating effective responsible disclosure.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.