Advisory Weakness Curation

node-fetch Inefficient Regular Expression Complexity node-fetch https://www.npmjs.com/package/node-fetch is a light-weight module that brings window.fetch to node.js. Affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS) in the `isOriginPotentiallyTrustworthy()` function in `referrer.js`, when processing a URL string with alternating letters and periods, such as `'http://' + 'a.a.'.repeat(i) + 'a'`.

Uncontrolled Resource Consumption Denial of Service in GitHub repository node-fetch/node-fetch prior to 3.2.10.