漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
漏洞
N/A
漏洞信息
uri-js is a module that tries to fully implement RFC 3986. One of these features is validating whether or not a supplied URL is valid or not. To do this, uri-js uses a regular expression, This regular expression is vulnerable to redos. This causes the program to hang and the CPU to idle at 100% usage while uri-js is trying to validate if the supplied URL is valid or not. To check if you're vulnerable, look for a call to `require("uri-js").parse()` where a user is able to send their own input. This affects uri-js 2.1.1 and earlier.
漏洞信息
N/A
漏洞
未加控制的资源消耗(资源穷尽)
漏洞
uri-js 安全漏洞
漏洞信息
uri-js是一款用于解析和验证URL的JavaScript库。 uri-js 2.1.1及之前版本中所使用的正则表达式存在安全漏洞。攻击者可利用漏洞造成程序挂起并造成CPU占用率达到100%。
漏洞信息
N/A
漏洞
N/A