medium5.3
CVE-2023-30858
The Denosaurs emoji package provides emojis for dinosaurs.
Impact
The Denosaurs emoji package provides emojis for dinosaurs. Starting in version 0.1.0 and prior to version 0.3.0, the reTrimSpace regex has 2nd degree polynomial inefficiency, leading to a delayed response given a big payload. The issue has been patched in 0.3.0. As a workaround, avoid using the `replace`, `unemojify`, or `strip` functions.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Denosaurs | Emoji | from 0.1.0 before 0.3.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/denosaurs/emoji/pull/11
- https://github.com/denosaurs/emoji/security/advisories/GHSA-w2xx-hjhp-gx5v
- https://huntr.dev/bounties/444f2255-5085-466f-ba0e-5549fa8846a3/
- https://github.com/denosaurs/emoji/pull/11
- https://github.com/denosaurs/emoji/security/advisories/GHSA-w2xx-hjhp-gx5v
- https://huntr.dev/bounties/444f2255-5085-466f-ba0e-5549fa8846a3/