Lucene search
K

8 matches found

SUSE CVE
SUSE CVE
added 2023/02/15 3:45 a.m.1 views

SUSE CVE-2021-23567

The package colors after 1.4.0 are vulnerable to Denial of Service DoS that was introduced through an infinite loop in the americanFlag module. Unfortunately this appears to have been a purposeful attempt by a maintainer of colors to make the package unusable, other maintainers' controls over thi...

7.5CVSS7.1AI score0.00586EPSS
Exploits1References3
Github Security Blog
Github Security Blog
added 2022/01/21 11:39 p.m.26 views

Infinite Loop in colors.js

The package colors after 1.4.0 are vulnerable to Denial of Service DoS that was introduced through an infinite loop in the americanFlag module. Unfortunately this appears to have been a purposeful attempt by a maintainer of colors to make the package unusable, other maintainers' controls over thi...

7.5CVSS3.5AI score0.00586EPSS
Exploits1References7Affected Software1
OSV
OSV
added 2022/01/21 11:39 p.m.23 views

GHSA-GH88-3PXP-6FM8 Infinite Loop in colors.js

The package colors after 1.4.0 are vulnerable to Denial of Service DoS that was introduced through an infinite loop in the americanFlag module. Unfortunately this appears to have been a purposeful attempt by a maintainer of colors to make the package unusable, other maintainers' controls over thi...

7.5CVSS7.5AI score0.00586EPSS
Exploits1References7
Veracode
Veracode
added 2022/01/17 11:55 a.m.17 views

Denial Of Service (DoS)

colors is vulnerable to denial of service. The vulnerability exists due to the use of an infinite loop function let i = 666; i Infinity; i++; in the americanFlag module...

7.5CVSS3.5AI score0.00586EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2022/01/14 8:15 p.m.1 views

CVE-2021-23567

The package colors after 1.4.0 are vulnerable to Denial of Service DoS that was introduced through an infinite loop in the americanFlag module. Unfortunately this appears to have been a purposeful attempt by a maintainer of colors to make the package unusable, other maintainers' controls over thi...

7.5CVSS7.1AI score0.00586EPSS
Exploits1References5
NVD
NVD
added 2022/01/14 8:15 p.m.10 views

CVE-2021-23567

The package colors after 1.4.0 are vulnerable to Denial of Service DoS that was introduced through an infinite loop in the americanFlag module. Unfortunately this appears to have been a purposeful attempt by a maintainer of colors to make the package unusable, other maintainers' controls over thi...

7.5CVSS0.00586EPSS
Exploits1References5
Prion
Prion
added 2022/01/14 8:15 p.m.16 views

Code injection

The package colors after 1.4.0 are vulnerable to Denial of Service DoS that was introduced through an infinite loop in the americanFlag module. Unfortunately this appears to have been a purposeful attempt by a maintainer of colors to make the package unusable, other maintainers' controls over thi...

5CVSS7.5AI score0.00586EPSS
Exploits1References5Affected Software1
CNNVD
CNNVD
added 2022/01/14 12:0 a.m.2 views

colors.js 安全漏洞

Colors.js is a project by Marak, an individual developer in the United States, to fetch colors in the Node.js console. A security vulnerability exists in colors.js. An attacker can introduce a Denial of Service DoS attack via an infinite loop in the AmericanFlag module...

7.5CVSS7.3AI score0.00586EPSS
Exploits1References6
Rows per page
Query Builder