CVE-2021-40895 Information

Description

A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in todo-regex v0.1.1 when matching crafted invalid TODO statements.

Reference

https://github.com/yetingli/SaveResults/blob/main/js/todo-regex.js