Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2023-23925

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-wqxw-8h5g-hq56

Switcher Client contains Regular Expression Denial of Service (ReDoS) ### Impact Unsanitized input flows into Strategy match operation (EXIST), where it is used to build a regular expression. This may result in a Regular expression Denial of Service attack (reDOS). ### Patches Patched in 3.1.4 ### Workarounds Avoid using Strategy settings that use REGEX in conjunction with EXIST and NOT_EXIST operations.

gitlab/npm/switcher-client/GMS-2023-233

Switcher Client contains Regular Expression Denial of Service (ReDoS) ### Impact Unsanitized input flows into Strategy match operation (EXIST), where it is used to build a regular expression. This may result in a Regular expression Denial of Service attack (reDOS). ### Patches Patched in 3.1.4 ### Workarounds Avoid using Strategy settings that use REGEX in conjunction with EXIST and NOT_EXIST operations.