A Regular expression denial of service (ReDoS) flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the resourcePath variable in interpolateName.js. loader-utils prior to version 3 is deprecated and no longer supported External Reference: https://github.com/webpack/loader-utils/issues/211
Created cachelib tracking bugs for this issue: Affects: fedora-all [bug 2209313] Created golang-github-prometheus tracking bugs for this issue: Affects: epel-all [bug 2209311] Created mozjs78 tracking bugs for this issue: Affects: fedora-all [bug 2209314] Created pcs tracking bugs for this issue: Affects: fedora-all [bug 2209315] Created seamonkey tracking bugs for this issue: Affects: epel-all [bug 2209312] Affects: fedora-all [bug 2209316] Created yarnpkg tracking bugs for this issue: Affects: fedora-all [bug 2209317]
This issue has been addressed in the following products: RHPAM 7.13.4 async Via RHSA-2023:4983 https://access.redhat.com/errata/RHSA-2023:4983