Cx8bc4df28-fcf5 @ Npm-debug-3.2.7

[electricmonk]

Checkmarx (SCA): Vulnerable Package
Vulnerability: Read More about Cx8bc4df28-fcf5
Checkmarx Project: electricmonk/ts-react-tdd
Repository URL: https://github.com/electricmonk/ts-react-tdd
Branch: main
Scan ID: e0708f2c-1083-45f2-a7cb-929f9b6a0c6c

---

In NPM debug, the enable function accepts a regular expression from user input without escaping it. Arbitrary regular expressions could be injected to cause a Denial of Service attack on the user's browser, otherwise known as a ReDoS (Regular Expression Denial of Service). This is a different issue than CVE-2017-16137.

---

Additional Info
Attack vector: NETWORK
Attack complexity: LOW
Confidentiality impact: NONE
Availability impact: HIGH