description: The timespan module is vulnerable to regular expression denial of service. Given 50k characters of untrusted user input it will block the event loop for around 10 seconds.
problem types: Denial of Service (CWE-400)
affected:
{
product: timespan node module
vendor: HackerOne
versions:
status: affected, version: All versions
}