CVE-2017-20162

Name of the Vulnerable Software and Affected Versions vercel ms versions up to 1.x

Description A problematic issue has been found in the function parse of the file index.js. The manipulation of the argument str leads to inefficient regular expression complexity. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Recommendations For vercel ms versions up to 1.x, upgrade to version 2.0.0 to address this issue. As a temporary workaround, consider restricting the use of the parse function in the index.js file until the patch is applied. Restrict access to the str argument to minimize the risk of exploitation.