Asymmetric denial of service - ReDoS In prototypejs
Description
An issue was discovered in the stripTags and unescapeHTML components in Prototype 1.7.3 where an attacker can cause a Regular Expression Denial of Service (ReDOS) through stripping crafted HTML tags.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 debian 12 | 1.7.3-1 | ||
debian 14 | 1.7.3-1 | ||
debian 13 | 1.7.3-1 |
Aliases
1. 2. 3. 4. 5.