CVE-2017-20162 @ Npm-ms-0.7.1

[RobertMickleCx]

Vulnerable Package issue exists @ Npm-ms-0.7.1 in branch master

A vulnerability was found in vercel ms prior to 2.0.0, which was classified as problematic. This issue affects the function "parse" of the file "index.js". The manipulation of the argument "str" leads to inefficient regular expression complexity. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-217451.

Namespace: RobertMickleCx
Repository: NodeGoat
Repository Url: https://github.com/RobertMickleCx/NodeGoat
CxAST-Project: RobertMickleCx/NodeGoat
CxAST platform scan: 4cad0b9d-cbe1-4acd-bb82-244764df9dbd
Branch: master
Application: NodeGoat
Severity: MEDIUM
State: NOT_IGNORED
Status: RECURRENT
CWE: CWE-1333

---

Additional Info
Attack vector: NETWORK
Attack complexity: LOW
Confidentiality impact: NONE
Availability impact: LOW
Remediation Upgrade Recommendation: 2.0.0

---

References
Advisory
Pull request
Release Note
Commit
Issue