Not rated
CVE-2020-1920 A regular expression denial of service (ReDoS) vulnerability in the validateBaseUrl function can cause the application…
Description
A regular expression denial of service (ReDoS) vulnerability in the validateBaseUrl function can cause the application to use excessive resources, become unresponsive, or crash. This was introduced in react-native version 0.59.0 and fixed in version 0.64.1.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| react-native 0.64 | earliest → < 0.64.1 | 0.64.1 |
| react-native 0.59 | 0.59.0 → latest | No fix stated |