Skip to content

Black Duck Hub Scan BDSA-2024-6246 - upgrade to @docusaurus/core 3.5.2 #1150

@rsrinivasanhome

Description

@rsrinivasanhome

Describe the bug
Ran BD hub scan on the guardrails source below issue

BDSA-2024-6246
Description
Path-to-RegExp is vulnerable to a regular expression denial-of-service (ReDoS) issue due to how it is possible for an inefficient expression to be generated for some routes that make use of named parameters.

The expression generated from affected routes is susceptible to excessive backtracking. An attacker could submit a crafted path input to a vulnerable application in order to trigger the backtracking flaw when attempts to match against the path are made. The inefficient matching operations could cause excessive consumption of CPU cycles and result in degraded performance for other clients.

Refer screen shot

Upgrade @docusaurus/core 3.1.1 to @docusaurus/core 3.5.2

image
image

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions