word-wrap vulnerable to Regular Expression Denial of Service

🗓️ 22 Jun 2023 06:30:18Reported by GitHub Advisory DatabaseType

github

github🔗 github.com👁 364 Views

word-wrap package vulnerability in regular expressio

Reporter	Title	Published	Views	Family All 47
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Cloud Pak for Multicloud Management	28 Feb 202421:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Network Automation 2.6.3 fixes multiple security vulnerabilities	1 Nov 202310:38	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Business Automation Manager Open Editions 9.0.1	16 Nov 202315:21	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container operands are vulnerable to denial of service due to [CVE-2023-26115]	25 Aug 202310:19	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in GNU Binutils, Bootstrap, PortSmash, Node.js, and libarchive might affect IBM Storage Defender – Data Protect.	18 Oct 202401:50	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilty in Node.js affect Cloud Pak System [CVE-2023-26155]	1 Aug 202413:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise is vulnerable to a remote attack and a denial of service due to Node.js modules protobuf.js, vm2 and word-wrap [CVE-2023-36665, CVE-2023-37903, CVE-2023-37466 and CVE-2023-26115]	11 Sep 202316:26	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Planning Analytics Workspace is affected but not considered vulnerable to multiple vulnerabilities	26 Mar 202504:04	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for September 2023	5 Oct 202308:42	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Edge Application Manager 4.5.2 addresses the security vulnerabilities listed in the CVEs below.	31 Aug 202316:08	–	ibm

Vulners

Node

word-wrap_project word-wrapRange<1.2.4npm

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-26115
security	www.security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-4058657
security	www.security.snyk.io/vuln/SNYK-JS-WORDWRAP-3149973
github	www.github.com/jonschlinkert/word-wrap/blob/master/index.js
github	www.github.com/jonschlinkert/word-wrap/releases/tag/1.2.4
github	www.github.com/jonschlinkert/word-wrap/commit/420dce9a2412b21881202b73a3c34f0edc53cb2e
github	www.github.com/jonschlinkert/word-wrap/blob/master/index.js%23L39
security	www.security.netapp.com/advisory/ntap-20240621-0006
github	www.github.com/advisories/GHSA-j8xg-fqg3-53r7

13 Feb 2025 19:00Current

7High risk

Vulners AI Score7

CVSS 3.15.3 - 7.5

EPSS0.00028

SSVC

word-wrap vulnerability regular expression redos software