{"id":"GHSA-qx4v-6gc5-f2vv","summary":"Regular Expression Denial of Service","details":"A Regular Expression Denial of Service vulnerability was discovered in esm before 3.1.0. The issue is that esm's find-indexes is using the unescaped identifiers in a regex, which, in this case, causes an infinite loop.","modified":"2021-02-25T17:20:28Z","published":"2019-06-20T14:32:56Z","database_specific":{"cwe_ids":["CWE-400"],"severity":"MODERATE","github_reviewed":true,"github_reviewed_at":"2019-06-20T14:17:20Z","nvd_published_at":null},"references":[{"type":"WEB","url":"https://github.com/standard-things/esm/issues/694"},{"type":"WEB","url":"https://github.com/standard-things/esm/commit/c41e001d81a5a52b0d2d1722b1c2af04d997c05b"}],"affected":[{"package":{"name":"esm","ecosystem":"npm","purl":"pkg:npm/esm"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.1.0"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2019/06/GHSA-qx4v-6gc5-f2vv/GHSA-qx4v-6gc5-f2vv.json"}}],"schema_version":"1.9.0"}