CVE-2021-3804: Inefficient Regular Expression Complexity in taro

September 20, 2021

taro is vulnerable to Inefficient Regular Expression Complexity

References

github.com/advisories/GHSA-468q-v4jj-485h
github.com/nervjs/taro/commit/acadb6c826ba57f2030a626f1de4f7b4608fcdb5
huntr.dev/bounties/0ebe85e6-cc85-42b8-957e-18d8df277414
nvd.nist.gov/vuln/detail/CVE-2021-3804

Code Behaviors & Features

Detect and mitigate CVE-2021-3804 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →