EUVD-2021-1106

Malware in sbrugna...

Denial of Service

Overview The package chrono-node before 2.2.4. It hangs on a date-like string with lots of embedded spaces. Recommendation Upgrade to version 2.2.4 or later References - CVE - GitHub Advisory...

@metascraper/helpers (>=5.12.14, <=5.21.0), @urlint/core (>=1.9.14, <=1.9.17) +61 more potentially affected by CVE-2021-23371 via chrono-node (>=2.0.2, <=2.2.3)

chrono-node NPM version =2.0.2, =5.12.14, =1.9.14, =1.0.0, =1.24.76, =1.24.76, =1.24.76, =1.32.40, =1.24.76, =1.24.76, =1.24.76, =1.24.76, =1.24.76, =1.32.47-alpha.0, =1.24.76, =1.24.76, =1.32.83 and more Source cves: CVE-2021-23371 Source advisory: OSV:GHSA-HPMR-G4PQ-JHGP...

GHSA-HPMR-G4PQ-JHGP Denial of service in chrono-node

This affects the package chrono-node before 2.2.4. It hangs on a date-like string with lots of embedded spaces...

Denial of service in chrono-node

This affects the package chrono-node before 2.2.4. It hangs on a date-like string with lots of embedded spaces...

Denial Of Service (DoS)

chrono-node is vulnerable to denial of service DoS. The vulnerability exists due to catastrophic backtracking in the regex matching, due to embedded spaces in the parseTimeUnits function...

Unspecified vulnerability in Npm chrono-node

Npm chrono-node is an application from Npm USA. Used to handle most date/time formats and extract information from any given text. A security vulnerability exists in Chrono-node prior to version 2.2.4, which stems from the program hanging on date-like strings with a large number of embedded space...

CVE-2021-23371

This affects the package chrono-node before 2.2.4. It hangs on a date-like string with lots of embedded spaces...

CVE-2021-23371

This affects the package chrono-node before 2.2.4. It hangs on a date-like string with lots of embedded spaces...

CVE-2021-23371 Regular Expression Denial of Service (ReDoS)

This affects the package chrono-node before 2.2.4. It hangs on a date-like string with lots of embedded spaces...

CVE-2021-23371

The CVE-2021-23371 issue affects the npm package chrono-node prior to version 2.2.4, where parsing date-like strings containing a large number of embedded spaces can cause the application to hang. Public advisories and references (GitHub advisory GHSA-hpmr-g4pq-jhgp, OSV, CNVD/CNNVD entries, and ...

CVE-2021-23371

This affects the package chrono-node before 2.2.4. It hangs on a date-like string with lots of embedded spaces...

CVE-2021-23371

This affects the package chrono-node before 2.2.4. It hangs on a date-like string with lots of embedded spaces...

CVE-2021-23371: Undefined Security Weakness

This affects the package chrono-node before 2.2.4. It hangs on a date-like string with lots of embedded spaces...

PT-2021-15468

Name of the Vulnerable Software and Affected Versions chrono-node versions prior to 2.2.4 Description The issue causes the software to hang when it encounters a date-like string containing numerous embedded spaces. Recommendations For versions prior to 2.2.4, update to version 2.2.4 or later to...

Npm chrono-node 安全漏洞

Npm chrono-node is an application from Npm USA. Used to handle most date/time formats and extract information from any given text. A security vulnerability exists in Chrono-node prior to version 2.2.4, which stems from the program hanging on date-like strings with a large number of embedded space...

@metascraper/helpers (>=5.12.14, <=5.21.0), @urlint/core (>=1.9.14, <=1.9.17) +61 more potentially affected by CVE-2021-23371 via chrono-node (>=2.0.2, <=2.2.3)

chrono-node NPM version =2.0.2, =5.12.14, =1.9.14, =1.0.0, =1.24.76, =1.24.76, =1.24.76, =1.32.40, =1.24.76, =1.24.76, =1.24.76, =1.24.76, =1.24.76, =1.32.47-alpha.0, =1.24.76, =1.24.76, =1.32.83 and more Source cves: CVE-2021-23371 Source advisory: SNYK:JS-CHRONONODE-1083228...

Regular Expression Denial of Service (ReDoS)

Overview chrono-node is an A natural language date parser in Javascript Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS. It hangs on a date-like string with lots of embedded spaces. Details Denial of Service DoS describes a family of attacks, all aim...