Inefficient regular expression complexity in Vercel Hyper up to 3.4.1 allows remote attackers with low privileges to cause denial of service via specially crafted input to the brace expansion logic. The vulnerability resides in the expand/braceExpand/ignoreMap function within the rimraf-standalone.js script. Public exploit code is available, but no evidence of active exploitation exists and EPSS indicates a low probability (0.17%) of widespread exploitation.
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Rated low severity (CVSS -1.0). No vendor patch available.
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Rated low severity (CVSS -1.0). No vendor patch available.
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Rated low severity (CVSS -1.0). No vendor patch available.
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Rated low severity (CVSS -1.0). No vendor patch available.
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Rated low severity (CVSS -1.0). No vendor patch available.