Input validation

🗓️ 27 Sep 2023 15:19:00Reported by PRIOn knowledge baseType

Module for secure and consistent retrieval of function names. Prior to 2.0.1, vulnerable to regular expression denial of service (redos) via imbalanced parentheses, leading to CPU load and processing time increase. Mitigated in commit `f934b228b` included in release 2.0.1. Upgrade advised

Reporter	Title	Published	Views	Family All 30
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Business Automation Manager Open Editions 9.0.1	16 Nov 202315:21	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data and Db2 Warehouse® on Cloud Pak for Data	2 Jan 202418:01	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Data Virtualization on Cloud Pak for Data (January 2025)	3 Apr 202523:21	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Observability with Instana is affected by multiple vulnerabilities	31 Jan 202411:13	–	ibm
AstraLinux	Astra Linux - уязвимость в node-get-func-name	20 May 202605:53	–	astralinux
Chainguard	CVE-2023-43646 vulnerabilities	27 Sep 202315:19	–	cgr
Circl	CVE-2023-43646	26 Sep 202308:41	–	circl
CNNVD	get-func-name Security Vulnerability	27 Sep 202300:00	–	cnnvd
CVE	CVE-2023-43646	26 Sep 202318:19	–	cve
Cvelist	CVE-2023-43646 Inefficient Regular Expression Complexity in get-func-name	26 Sep 202318:19	–	cvelist

Source	Link
github	www.github.com/chaijs/get-func-name/commit/f934b228b5e2cb94d6c8576d3aac05493f667c69
github	www.github.com/chaijs/get-func-name/security/advisories/GHSA-4q6p-r6v2-jvc5

02 Oct 2023 16:26Current

7.4High risk

Vulners AI Score7.4

EPSS0.01353