Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

WS-2018-0589

Good to know:

icon
icon

Date: March 5, 2018

A Regular Expression vulnerability was found in nwmatcher before 1.4.4. The fix replacing multiple repeated instances of the "\s*" pattern.

Language: Java

Severity Score

Related Resources (2)

https://github.com/dperini/nwmatcher/commit/9dcc2b039beeabd18327a5ebaa537625872e16f0
https://www.mend.io/vulnerability-database/WS-2018-0589

Severity Score

Weakness Type (CWE)

Incorrect Regular Expression

CWE-185

Top Fix

icon

Upgrade Version

Upgrade to version jadu/pulsar - dev-dependabot/npm_and_yarn/glob-parent-and-grunt-browserify-and-matchdep-and-mochify-5.1.2;jadu/pulsar - 11.0.0-beta.3;jadu/pulsar - dev-snyk-fix-2236754c7dd2c1d32c81bb4afc1ea7f8;jadu/pulsar - dev-docs;jadu/pulsar - dev-dependabot/npm_and_yarn/docs/postcss-8.4.31;jadu/pulsar - dev-lodash;jadu/pulsar - dev-snyk-fix-b6f522fbf81faca176348eeda304d3c4;jadu/pulsar - dev-filter-truncate;jadu/pulsar - dev-dependabot/npm_and_yarn/handlebars-4.7.7;jadu/pulsar - dev-dependabot/npm_and_yarn/qs-and-browser-sync-and-grunt-gh-pages-6.11.0;jadu/pulsar - dev-dependabot/npm_and_yarn/docs/node-sass-and-docusaurus-plugin-sass-8.0.0;jadu/pulsar - dev-dependabot/npm_and_yarn/docs/semver-5.7.2;jadu/pulsar - dev-dependabot/npm_and_yarn/elliptic-6.5.4;jadu/pulsar - dev-feature/remove-extensions;jadu/pulsar - dev-snyk-upgrade-f2992393e8ee38c4042a6d738a26a0ff;jadu/pulsar - dev-SUP025952;jadu/pulsar - dev-dependabot/npm_and_yarn/docs/http-cache-semantics-4.1.1;jadu/pulsar - dev-dependabot/npm_and_yarn/jquery-3.5.0;jadu/pulsar - dev-purple;jadu/pulsar - dev-a11y-filterbar;jadu/pulsar - dev-1107_form-compound-mobile-spacing;jadu/pulsar - dev-poc-image-management;jadu/pulsar - dev-modal-lexicon;jadu/pulsar - dev-snyk-upgrade-07a5b6d57b29d3533ba50ff5882a5e53;jadu/pulsar - dev-read-only-a11y;jadu/pulsar - dev-snyk-upgrade-294cc9393d2ef5f9358959897b19a074;nwmatcher - 1.4.4;oburatongoi/productivity - 0.3.36;jsdom - 11.11.0;org.webjars.npm:nwmatcher:1.4.3;org.webjars.npm:nwmatcher:1.3.7;org.webjars.bower:nwmatcher:no_fix

Learn More

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): REQUIRED
Scope (S): UNCHANGED
Confidentiality (C): HIGH
Integrity (I): NONE
Availability (A): NONE

Do you need more information?

Contact Us