CVE-2021-23362 @ Npm-hosted-git-info-2.7.1

[RobertMickleCx]

Vulnerable Package issue exists @ Npm-hosted-git-info-2.7.1 in branch master

Hosted-git-info versions prior to 2.8.9, and 3.0.x prior to 3.0.8 are vulnerable to Regular Expression Denial of Service (ReDoS) via regular expression shortcutMatch in the fromUrl function in index.js. The affected regular expression exhibits polynomial worst-case time complexity.

Namespace: RobertMickleCx
Repository: NodeGoat
Repository Url: https://github.com/RobertMickleCx/NodeGoat
CxAST-Project: RobertMickleCx/NodeGoat
CxAST platform scan: 4cad0b9d-cbe1-4acd-bb82-244764df9dbd
Branch: master
Application: NodeGoat
Severity: MEDIUM
State: NOT_IGNORED
Status: RECURRENT
CWE: CWE-400

---

Additional Info
Attack vector: NETWORK
Attack complexity: LOW
Confidentiality impact: NONE
Availability impact: LOW

---

References
Advisory
Pull request
Commit