Cx8bc4df28-fcf5 @ Npm-debug-2.6.9

[cx-boris-goman]

Checkmarx (SCA): Vulnerable Package
Vulnerability: Read More about Cx8bc4df28-fcf5
Checkmarx Project: cx-boris-goman/AutoPR
Repository URL: https://github.com/cx-boris-goman/AutoPR
Branch: kid
Scan ID: bfaa74de-6358-4edb-a528-1d669bc0863c

---

In NPM "debug" versions prior to 4.4.0, the "enable" function accepts a regular expression from user input without escaping it. Arbitrary regular expressions could be injected to cause a Denial of Service attack on the user's browser, otherwise known as a ReDoS (Regular Expression Denial of Service). This is a different issue than CVE-2017-16137.

---

Additional Info
Attack vector: NETWORK
Attack complexity: HIGH
Confidentiality impact: NONE
Availability impact: LOW
Remediation Upgrade Recommendation: 4.4.0