eggjs / eggjs/egg

Some bugs were found in the project

Open
#5,781 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
TypeScript
Stars
19k
Forks
1.8k
PR merge metrics
No merged PRs in 30d

Description

### 在此输入你需要反馈的 Bug 具体信息(Bug in Detail):

Some CWE vulnerabilities were found, as follows:
CWE-1333 (Inefficient Regular Expression): The regular expression contains nested repeating quantifiers and optional matches. It triggers exponential backtracking when processing malformed repeated characters, with the risk of ReDoS attacks, which may lead to application unresponsiveness and affect the availability of the production environment.

### 可复现问题的仓库地址(Reproduction Repo)

1

### Node 版本号:

v

### Eggjs 版本号:

v

### 相关插件名称与版本号(PlugIn and Name):

v

### 操作平台与版本号(Platform and Version):

v

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.