medium5.5
CVE-2023-25166
@sideway/formula contains Regular Expression Denial of Service (ReDoS) Vulnerability
Impact
### Impact User-provided strings to formula's parser might lead to polynomial execution time. ### Patches Users should upgrade to 3.0.1+. ### Workarounds None.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | @sideway/formula | < 3.0.1 | 3.0.1 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hapi | Formula | before 3.0.1 |