CVE-2020-7661

CVE-2020-7661 describes a Regular Expression Denial of Service (ReDoS) vulnerability affecting all versions of the url-regex project. An attacker can trigger a denial of service by providing a specially crafted, very long string to the String.test function. This vulnerability has a CVSS score of 7.5 (HIGH), indicating it can be exploited remotely with low attack complexity, resulting in high availability impact. While no active exploitation, public exploit code, or significant community discussion has been observed, organizations using url-regex should still apply available patches to mitigate this risk.