Lucene search

K
osvGoogleOSV:GHSA-4263-Q746-94MW
HistoryJun 18, 2022 - 12:00 a.m.

Uncontrolled Resource Consumption in fast-string-search

2022-06-1800:00:20
Google
osv.dev
11

0.001 Low

EPSS

Percentile

36.8%

All versions of package fast-string-search are vulnerable to Denial of Service (DoS) when computations are incorrect for non-string inputs. One can cause the V8 to attempt reading from non-permitted locations and cause a segmentation fault due to the violation.

CPENameOperatorVersion
fast-string-searchle1.4.3

0.001 Low

EPSS

Percentile

36.8%

Related for OSV:GHSA-4263-Q746-94MW