GHSA-4Q6P-R6V2-JVC5 Chaijs/get-func-name vulnerable to ReDoS

🗓️ 27 Sep 2023 20:16:00Reported by GoogleType

osv

osv🔗 osv.dev

ChaiJs get-func-name regex backtracking causes denial of service on inputs with unbalanced parentheses.

Reporter	Title	Published	Views	Family All 30
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Business Automation Manager Open Editions 9.0.1	16 Nov 202315:21	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data and Db2 Warehouse® on Cloud Pak for Data	2 Jan 202418:01	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Data Virtualization on Cloud Pak for Data (January 2025)	3 Apr 202523:21	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Observability with Instana is affected by multiple vulnerabilities	31 Jan 202411:13	–	ibm
AstraLinux	Astra Linux - уязвимость в node-get-func-name	20 May 202605:53	–	astralinux
Chainguard	CVE-2023-43646 vulnerabilities	27 Sep 202315:19	–	cgr
Circl	CVE-2023-43646	26 Sep 202308:41	–	circl
CNNVD	get-func-name Security Vulnerability	27 Sep 202300:00	–	cnnvd
CVE	CVE-2023-43646	26 Sep 202318:19	–	cve
Cvelist	CVE-2023-43646 Inefficient Regular Expression Complexity in get-func-name	26 Sep 202318:19	–	cvelist

Source	Link
github	www.github.com/chaijs/get-func-name/security/advisories/GHSA-4q6p-r6v2-jvc5
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-43646
github	www.github.com/chaijs/get-func-name/commit/f934b228b5e2cb94d6c8576d3aac05493f667c69
github	www.github.com/chaijs/get-func-name
github	www.github.com/chaijs/get-func-name/blob/78ad756441a83f3dc203e50f76c113ae3ac017dc/index.js

04 Feb 2026 02:15Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.17.5

EPSS0.01353

chaijs get function name regular expression denial of service backtracking unbalanced parentheses