Medium severity4.3NVD Advisory· Published Sep 2, 2024· Updated Jun 17, 2026
CVE-2020-36830
CVE-2020-36830
Description
A vulnerability was found in nescalante urlregex up to 0.5.0 and classified as problematic. This issue affects some unknown processing of the file index.js of the component Backtracking. The manipulation leads to inefficient regular expression complexity. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 0.5.1 is able to address this issue. The identifier of the patch is e5a085afe6abfaea1d1a78f54c45af9ef43ca1f9. It is recommended to upgrade the affected component.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
urlregexnpm | < 0.5.1 | 0.5.1 |
Affected products
3cpe:2.3:a:nescalante:urlregex:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:nescalante:urlregex:*:*:*:*:*:*:*:*range: <0.5.1
- (no CPE)range: 0.1
Patches
Vulnerability mechanics
References
7- github.com/nescalante/urlregex/commit/e5a085afe6abfaea1d1a78f54c45af9ef43ca1f9nvdPatchWEB
- github.com/nescalante/urlregex/pull/8nvdExploitWEB
- github.com/advisories/GHSA-rw72-v6c7-hf9rghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2020-36830ghsaADVISORY
- vuldb.comnvdThird Party AdvisoryWEB
- github.com/nescalante/urlregex/releases/tag/v0.5.1nvdRelease NotesWEB
- vuldb.comnvdPermissions RequiredWEB
News mentions
0No linked articles in our index yet.