Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2018-20801

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-xmc8-cjfr-phx3

Regular Expression Denial of Service in highcharts Versions of `highcharts` prior to 6.1.0 are vulnerable to Regular Expression Denial of Service (ReDoS). Untrusted input may cause catastrophic backtracking while matching regular expressions. This can cause the application to be unresponsive leading to Denial of Service. ## Recommendation Upgrade to version 6.1.0 or higher.

gitlab/npm/highcharts/CVE-2018-20801

Incorrect Regular Expression In `js/parts/SvgRenderer.js` in Highcharts, the use of backtracking regular expressions permitted an attacker to conduct a denial of service attack against the `SVGRenderer` component, aka ReDoS.