Decamelize is used to convert a dash/dot/underscore/space separated string to camelCase. Decamelize 1.1.0 through 1.1.1 uses regular expressions to evaluate a string and takes unescaped separator values, which can be used to create a denial of service attack.
{
"cpe": [
"cpe:2.3:a:decamelize_project:decamelize:1.1.0:*:*:*:*:*:*:*",
"cpe:2.3:a:decamelize_project:decamelize:1.1.1:*:*:*:*:*:*:*"
],
"source": "CPE_STRING",
"extracted_events": [
{
"introduced": "1.1.0"
},
{
"last_affected": "1.1.0"
},
{
"introduced": "1.1.1"
},
{
"last_affected": "1.1.1"
}
]
}