CVE-2017-16117CWE-400
slug is a module to slugify strings, even if they contain unicode
published June 7, 2018
What it is
slug is a module to slugify strings, even if they contain unicode. slug is vulnerable to regular expression denial of service is specially crafted untrusted input is passed as input. About 50k characters can block the event loop for 2 seconds.
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.01559 · 75.0th percentile
- Weakness
- CWE-400 · Uncontrolled Resource Consumption
- Published
- 2018-06-07T02:00Z
EPSS history
Timeline