CVE-2017-16117CWE-400

slug is a module to slugify strings, even if they contain unicode

published June 7, 2018

CVSS
—
EPSS
2%
Percentile
75.0
In the wild
Unconfirmed
What it is

slug is a module to slugify strings, even if they contain unicode. slug is vulnerable to regular expression denial of service is specially crafted untrusted input is passed as input. About 50k characters can block the event loop for 2 seconds.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01559 · 75.0th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2018-06-07T02:00Z
EPSS history
Timeline
  • 07 JUN 02:00Z
    slug is a module to slugify strings, even if they contain unicode
    cvelistv5