GHSA-43f8-2h32-f4cj moderate
Regular Expression Denial of Service in hosted-git-info
Affected range
SEMVER: introduced 0; fixed 2.8.9SEMVER: introduced 3.0.0; fixed 3.0.8Fixed versions: 2.8.9, 3.0.8
Provides metadata and conversions from repository urls for GitHub, Bitbucket and GitLab
Evidence path
RequestGuard keeps these facts separate. A KEV match refers to a CVE, while OSV supplies the package and version match.
Latest version
10.1.1
No matching published advisory returned
Known exploitation
No KEV match
Checked by exact CVE identifier
Highest advisory severity
Moderate
1 active advisory
The registry confirms the version, then OSV checks advisories for that exact value.
Published records
Affected range
SEMVER: introduced 0; fixed 2.8.9SEMVER: introduced 3.0.0; fixed 3.0.8Fixed versions: 2.8.9, 3.0.8