GHSA-h6ch-v84p-w6p9 high
Regular Expression Denial of Service (ReDoS)
Affected range
SEMVER: introduced 0; fixed 3.5.0Fixed versions: 3.5.0
diff
A JavaScript text diff implementation.
npm latest 9.0.0 BSD-3-Clause
Evidence path
Version, exploitation, severity
RequestGuard keeps these facts separate. A KEV match refers to a CVE, while OSV supplies the package and version match.
1
Latest version
9.0.0
No matching published advisory returned
2
Known exploitation
No KEV match
Checked by exact CVE identifier
3
Highest advisory severity
High
2 active advisories
Check an exact version
The registry confirms the version, then OSV checks advisories for that exact value.
Published records
Advisories
jsdiff has a Denial of Service vulnerability in parsePatch and applyPatch
Affected range
SEMVER: introduced 6.0.0; fixed 8.0.3SEMVER: introduced 5.0.0; fixed 5.2.2SEMVER: introduced 4.0.0; fixed 4.0.4SEMVER: introduced 0; fixed 3.5.1Fixed versions: 8.0.3, 5.2.2, 4.0.4, 3.5.1