Skip to content

Vendor

slug project vulnerabilities

1 published CVE affecting slug project, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0
Atom feed of slug project alerts

Products

Latest slug project CVEs

Newest publication first

  1. CVE-2017-16117 Regular Expression Denial of Service in slug

    Published
    HighCVSS 7.5 EPSS 1.6%

    slug is a module to slugify strings, even if they contain unicode. slug is vulnerable to regular expression denial of service is specially crafted untrusted input is passed as input. About 50k characters can block the event loop for 2 seconds.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.