Uncontrolled Resource Consumption
The timespan module is vulnerable to regular expression denial of service. Given k characters of untrusted user input it will block the event loop for around seconds.
Advisories for Npm/Timespan package
2018
2017
Regular Expression Denial of Service
The timespan module is vulnerable to regular expression denial of service. Given k characters of untrusted user input it will block the event loop for around seconds.