Alternatives and similar repositories for vuln-regex-detector:

Users that are interested in vuln-regex-detector are comparing it to the libraries listed below

• davisjam / safe-regex
  Detect possibly catastrophic, exponential-time regular expressions
  ☆175Updated 2 years ago
• fuzzitdev / jsfuzz
  coverage guided fuzz testing for javascript
  ☆608Updated 3 years ago
• snyk / vulncost
  Find security vulnerabilities in open source npm packages while you code
  ☆204Updated 2 years ago
• google / csp-evaluator
  ☆339Updated 2 months ago
• w3c / trusted-types
  A browser API to prevent DOM-Based Cross Site Scripting in modern web applications.
  ☆605Updated last week
• HoLyVieR / prototype-pollution-nsec18
  Content released at NorthSec 2018 for my talk on prototype pollution
  ☆515Updated 7 months ago
• NodeSecure / js-x-ray
  JavaScript & Node.js open-source SAST scanner. A static analyser for detecting most common malicious patterns 🔬.
  ☆229Updated last week
• brannondorsey / host-validation
  Express.js middleware for "Host" and "Referer" header validation to protect against DNS rebinding attacks.
  ☆191Updated 2 years ago
• mozilla / eslint-plugin-no-unsanitized
  Custom ESLint rule to disallows unsafe innerHTML, outerHTML, insertAdjacentHTML and alike
  ☆233Updated last month
• ajinabraham / njsscan
  njsscan is a semantic aware SAST tool that can find insecure code patterns in your Node.js applications.
  ☆383Updated 2 months ago
• google / node-sec-roadmap
  Some thoughts on how Node.js might respond to a changing security environment
  ☆172Updated 5 years ago
• lirantal / lockfile-lint
  Lint an npm or yarn lockfile to analyze and detect security issues
  ☆790Updated 4 months ago
• JacksonGL / NPM-Vuln-PoC
  Vulnerabilities discovered in npm packages [Berkeley PL & Security Research]
  ☆43Updated 6 months ago
• jagracey / RegEx-DoS
  RegEx Denial of Service (ReDos) Scanner
  ☆162Updated 7 years ago
• ESAPI / node-esapi
  A minimal port of the old, publicly archived "owasp-esapi-js" (Enterprise Security API for JavaScript) encoder.
  ☆135Updated 2 years ago
• spaceraccoon / npm-scan
  An extensible, heuristic-based vulnerability scanning tool for installed npm packages
  ☆50Updated 3 years ago
• sonatype-nexus-community / auditjs
  Audits an NPM package.json file to identify known vulnerabilities.
  ☆225Updated 2 months ago
• hapijs / bourne
  JSON.parse() drop-in replacement with prototype poisoning protection
  ☆173Updated 2 months ago
• sola-da / ReDoS-vulnerabilities
  A list of ReDoS vulnerabilities in npm modules found by the Software Lab at TU Darmstadt. For each vulnerability, there is a proof-of-con…
  ☆58Updated 7 years ago
• NodeSecure / cli
  JavaScript security CLI that allow you to deeply analyze the dependency tree of a given package or local Node.js project.
  ☆367Updated this week
• uhop / node-re2
  node.js bindings for RE2: fast, safe alternative to backtracking regular expression engines.
  ☆505Updated 4 months ago
• nodejs / security-advisories
  Security advisories for Node.js and the JavaScript ecosystem.
  ☆41Updated 3 years ago
• gkouziik / eslint-plugin-security-node
  ESLint security plugin for Node.js
  ☆102Updated 10 months ago
• isaacs / minipass
  A stream implementation that does more by doing less
  ☆251Updated 7 months ago
• fastify / secure-json-parse
  JSON.parse() drop-in replacement with prototype poisoning protection
  ☆228Updated this week
• WICG / sanitizer-api
  ☆236Updated last week
• webschik / tslint-config-security
  TSLint security rules
  ☆70Updated 4 years ago
• nodejs / security-wg
  Node.js Ecosystem Security Working Group
  ☆507Updated 3 weeks ago
• mikewest / http-state-tokens
  Incrementally better HTTP state management.
  ☆300Updated 2 years ago