Regular expression denial of service in react-native
High severity
GitHub Reviewed
Published
Jul 20, 2021
to the GitHub Advisory Database
•
Updated Jan 27, 2023
Package
Affected versions
>= 0.59.0, < 0.62.3
>= 0.63.0, < 0.64.1
Patched versions
0.62.3
0.64.1
Description
Published by the National Vulnerability Database
Jun 1, 2021
Reviewed
Jun 2, 2021
Published to the GitHub Advisory Database
Jul 20, 2021
Last updated
Jan 27, 2023
A regular expression denial of service (ReDoS) vulnerability in the validateBaseUrl function can cause the application to use excessive resources, become unresponsive, or crash. This was introduced in react-native version 0.59.0 and fixed in version 0.64.1.
References