medium5.3
CVE-2018-1109
A vulnerability was found in Braces versions 2.2.0 and above, prior to 2.3.1.
Impact
A vulnerability was found in Braces versions 2.2.0 and above, prior to 2.3.1. Affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS) attacks.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Braces Project | Braces | before 2.3.1 |