KERN KI Chat-Bot Example

LinkifyIt#match scan loop has quadratic algorithmic complexity

KaTeX: Existing prototype pollution can bypass trust restrictions

minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions

markdown-it linkify: true has two quadratic paths, so a few hundred KB of markdown blocks the event loop for tens of seconds

flatted vulnerable to unbounded recursion DoS in parse() revive phase

js-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sources

nanoid: non-secure generators can loop indefinitely with negative size

ajv has ReDoS when using `$data` option

undici vulnerable to response truncation via oversized chunked responses in the dump interceptor

undici vulnerable to cross-user cookie disclosure via Set-Cookie caching in shared caches

Undici has an HTTP Request/Response Smuggling issue

nanoid: custom generators can loop indefinitely when size is zero

axios Vulnerable to Full Man-in-the-Middle via Prototype Pollution Gadget in `config.proxy`

undici vulnerable to HTTP response queue poisoning via keep-alive socket reuse

path-to-regexp vulnerable to Regular Expression Denial of Service via multiple route parameters

markdown-it is has a Regular Expression Denial of Service (ReDoS)

shell-quote: Quadratic-complexity Denial of Service in `parse()` (CWE-407)

axios Vulnerable to Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge

brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups

Axios has a NO_PROXY Hostname Normalization Bypass that Leads to SSRF

minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern

Axios: HTTP/2 adapter bypasses configured DNS lookup and proxy controls

Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching

Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget in `parseReviver`

undici vulnerable to Denial of Service via unhandled error in WebSocket permessage-deflate decompression

undici vulnerable to Denial of Service via unbounded decompression of compressed responses

Axios: Excessive recursion in formDataToJSON can cause denial of service

Axios is Vulnerable to Denial of Service via __proto__ Key in mergeConfig

Axios: CRLF Injection in multipart/form-data body via unsanitized blob.type in formDataToStream

yaml is vulnerable to Stack Overflow via deeply nested YAML collections

Undici has CRLF Injection in undici via `upgrade` option

undici vulnerable to cross-user information disclosure and parse-time crash via degenerate private cache directives

mdast-util-to-hast has unsanitized class attribute

Axios is vulnerable to DoS attack through lack of data size check

Axios: Fetch Adapter Header Injection via Inherited FormData getHeaders

qs: Denial of Service via Attacker Controlled isBuffer

js-yaml: YAML merge-key chains can force quadratic CPU consumption

Axios: Denial of Service via Unhandled 'error' Event in HTTP/2 ClientHttp2Session Initialization

Axios' HTTP adapter-streamed uploads bypass maxBodyLength when maxRedirects: 0

glob CLI: Command injection via -c/--cmd executes matches with shell:true

JS-YAML: Quadratic CPU consumption in !!omap resolution (3.x and 4.x) — CVE-2026-59870 fix not backported

Axios: unbounded recursion in toFormData causes DoS via deeply nested request data

source-map-js allows event-loop denial of service through indexed source-map section offsets

Axios: Header Injection via Prototype Pollution

PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS comments

brace-expansion: DoS via uncontrolled recursion in parseCommaParts causing stack exhaustion

qs's arrayLimit bypass in its bracket notation allows DoS via memory exhaustion

markdown-it: Quadratic complexity DoS in smartquotes rule via replaceAt string operations