CVE-2021-29469 Potential exponential regex in monitor mode

🗓️ 23 Apr 2021 18:10:15Reported by GitHub_MType

CVE-2021-29469 Node-redis client monitor mode regex vulnerabilit

Reporter	Title	Published	Views	Family All 24
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Cloud Pak for Automation	25 Jun 202122:49	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	12 Jan 202317:19	–	ibm
IBM Security Bulletins	Security Bulletin: There are multiple vulnerabilites that affect IBM Engineering Requirements Quality Assistant On-Premises (CVE-2021-4104, CVE-2021-29469, CVE-2021-44531, CVE-2021-44531, CVE-2022-21824, CVE-2021-29899, CVE-2021-27290 )	17 Mar 202215:37	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities of Mozilla Firefox (less than Firefox 78.14.0 ESR + CVE-2021-29967) have affected Synthetic Playback Agent 8.1.4.0-8.1.4 IF14	28 Sep 202116:45	–	ibm
IBM Security Bulletins	Security Bulletin: A Vulnerability in Redis Node.js module affecting Watson Knowledge Catalog for IBM Cloud Pak for Data (CVE-2021-29469)	22 Jun 202217:21	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics has addressed multiple vulnerabilities (CVE-2021-29469, CVE-2022-39160, CVE-2022-38708, CVE-2022-42003, CVE-2022-42004, CVE-2022-43883, CVE-2022-43887, CVE-2022-25647, CVE-2022-36364)	10 Mar 202323:31	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability in Node.js xmlhttprequest-ssl module affects IBM Cloud Automation Manager	16 Sep 202118:07	–	ibm
CNNVD	node-redis 安全漏洞	23 Apr 202100:00	–	cnnvd
CVE	CVE-2021-29469	23 Apr 202118:10	–	cve
Debian CVE	CVE-2021-29469	23 Apr 202118:10	–	debiancve

[
  {
    "product": "node-redis",
    "vendor": "NodeRedis",
    "versions": [
      {
        "status": "affected",
        "version": "< 3.1.1"
      }
    ]
  }
]

Source	Link
security	www.security.netapp.com/advisory/ntap-20210611-0010/
github	www.github.com/NodeRedis/node-redis/commit/2d11b6dc9b9774464a91fb4b448bad8bf699629e
github	www.github.com/NodeRedis/node-redis/releases/tag/v3.1.1
github	www.github.com/NodeRedis/node-redis/security/advisories/GHSA-35q2-47q7-3pc3

11 Jun 2021 10:06Current

7.5High risk

Vulners AI Score7.5

CVSS 3.15.3

EPSS0.00926

CWE-400