GMS-2015-53: Regular Expression Denial of Service

December 23, 2015

Decamelize uses regular expressions to evaluate a string and takes unescaped separator values, which can be used to create a denial of service attack.

References

github.com/sindresorhus/decamelize/issues/5

Code Behaviors & Features

Detect and mitigate GMS-2015-53 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →