Denial Of Service (DoS)

chrono-node is vulnerable to denial of service DoS. The vulnerability exists due to catastrophic backtracking in the regex matching, due to embedded spaces in the parseTimeUnits function...

Unspecified vulnerability in Npm chrono-node

Npm chrono-node is an application from Npm USA. Used to handle most date/time formats and extract information from any given text. A security vulnerability exists in Chrono-node prior to version 2.2.4, which stems from the program hanging on date-like strings with a large number of embedded space...

CVE-2021-23371

This affects the package chrono-node before 2.2.4. It hangs on a date-like string with lots of embedded spaces...

CVE-2021-23371

This affects the package chrono-node before 2.2.4. It hangs on a date-like string with lots of embedded spaces...

CVE-2021-23371

The CVE-2021-23371 issue affects the npm package chrono-node prior to version 2.2.4, where parsing date-like strings containing a large number of embedded spaces can cause the application to hang. Public advisories and references (GitHub advisory GHSA-hpmr-g4pq-jhgp, OSV, CNVD/CNNVD entries, and ...

CVE-2021-23371

This affects the package chrono-node before 2.2.4. It hangs on a date-like string with lots of embedded spaces...

CVE-2021-23371 Regular Expression Denial of Service (ReDoS)

This affects the package chrono-node before 2.2.4. It hangs on a date-like string with lots of embedded spaces...

CVE-2021-23371

This affects the package chrono-node before 2.2.4. It hangs on a date-like string with lots of embedded spaces...

Npm chrono-node 安全漏洞

Npm chrono-node is an application from Npm USA. Used to handle most date/time formats and extract information from any given text. A security vulnerability exists in Chrono-node prior to version 2.2.4, which stems from the program hanging on date-like strings with a large number of embedded space...

CVE-2021-23371: Undefined Security Weakness

This affects the package chrono-node before 2.2.4. It hangs on a date-like string with lots of embedded spaces...

PT-2021-15468

Name of the Vulnerable Software and Affected Versions chrono-node versions prior to 2.2.4 Description The issue causes the software to hang when it encounters a date-like string containing numerous embedded spaces. Recommendations For versions prior to 2.2.4, update to version 2.2.4 or later to...

@metascraper/helpers (>=5.12.14, <=5.21.0), @urlint/core (>=1.9.14, <=1.9.17) +61 more potentially affected by CVE-2021-23371 via chrono-node (>=2.0.2, <=2.2.3)

chrono-node NPM version =2.0.2, =5.12.14, =1.9.14, =1.0.0, =1.24.76, =1.24.76, =1.24.76, =1.32.40, =1.24.76, =1.24.76, =1.24.76, =1.24.76, =1.24.76, =1.32.47-alpha.0, =1.24.76, =1.24.76, =1.32.83 and more Source cves: CVE-2021-23371 Source advisory: SNYK:JS-CHRONONODE-1083228...

Regular Expression Denial of Service (ReDoS)

Overview chrono-node is an A natural language date parser in Javascript Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS. It hangs on a date-like string with lots of embedded spaces. Details Denial of Service DoS describes a family of attacks, all aim...

fmt:chrono-duration-fuzzer: Stack-buffer-overflow in int fmt::v7::detail::snprintf_float<long double>

Project: https://github.com/fmtlib/fmt.git Detailed Report: https://oss-fuzz.com/testcase?key=5021224255225856 Project: fmt Fuzzing Engine: afl Fuzz Target: chrono-duration-fuzzer Job Type: aflasanfmt Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address: 0x7f299b95588f Crash...

Potential segfault in the time crate

Impact The affected functions set environment variables without synchronization. On Unix-like operating systems, this can crash in multithreaded programs. Programs may segfault due to dereferencing a dangling pointer if an environment variable is read in a different thread than the affected...

abra (0.0.1), abrute (>=0.1.7, <=0.1.9) +712 more potentially affected by CVE-2020-26235 via chrono (>=0.2.16, <=0.4.19)

chrono CARGO version =0.2.16, =0.1.7, =0.1.0, =0.1.0, =0.0.11, =0.7.0, =1.1.0, =0.3.0, =0.1.0, =0.1.0, =0.0.1, =0.1.1, =0.2.0 and more Source cves: CVE-2020-26235 Source advisory: OSV:RUSTSEC-2020-0159...

chrono.pitchcrm.net Cross Site Scripting vulnerability OBB-1454207

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

chrono-pizza72.fr XSS vulnerability

Open Bug Bounty ID: OBB-659026 Description| Value ---|--- Affected Website:| chrono-pizza72.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Chrono Bomb DE - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Chrono Bomb DE published at the 'play' market has multiple vulnerabilities...