Description
Since #921 and #924 have been closed I am raising the following issue as it should be fixed!
...
Since December 2020 Checkmark has raised the following issue (which is getting flagged for me in WebStorm IDE):
https://devhub.checkmarx.com/cve-details/Cx8bc4df28-fcf5/
INEFFICIENT REGULAR EXPRESSION COMPLEXITY IN DEBUG
In NPM debug
, the enable
function accepts a regular expression from user input without escaping it. Arbitrary regular expressions could be injected to cause a Denial of Service attack on the user's browser, otherwise known as a ReDoS (Regular Expression Denial of Service). This is a different issue than CVE-2017-16137.
CWE-1333 - Inefficient Regular Expression Complexity
The product uses a regular expression with an inefficient, possibly exponential worst-case computational complexity that consumes excessive CPU cycles.