Description (CNA)
A vulnerability classified as problematic has been found in actions toolkit 0.5.0. This affects the function globEscape of the file toolkit/packages/glob/src/internal-pattern.ts of the component glob. The manipulation leads to inefficient regular expression complexity. It is possible to initiate the attack remotely.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| actions / toolkit | affected 0.5.0 |
CWE
CWE-1333, CWE-400
References
- https://vuldb.com/?id.311661
- https://vuldb.com/?ctiid.311661
- https://vuldb.com/?submit.585727
- https://github.com/actions/toolkit/pull/2057
ADP enrichment
No English description supplied.
No references supplied.