CVE-2015-9239

creationtimestamp| type| source ---|---|--- 2020-09-01 15:17:48+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-c2v2-7rcg-2ch7...

@akryum/hotel (>=0.8.8, <=0.8.12), @bdefore/nivo-patterned-radial-arc (0.79.1) +19 more potentially affected by CVE-2015-9239 via ansi2html (0.0.1)

ansi2html NPM version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on ansi2html and may be impacted: - @akryum/hotel =0.8.8, =0.8.7, =2.0.4, =10.3.3, =1.1.0, =1.4.1, =0.9.0-0, =9.12.5, =9.12.9 and more Source cves: CVE-2015-9239 Source advisory:...

CVE-2015-9239

CVE-2015-9239 affects the ansi2html package and is a regular expression denial of service (ReDoS) vulnerability triggered by certain types of user input. The connected advisories document a PoC and confirm the issue, with CVSS v3.1 base score 7.5 (HIGH) and High availability impact per the NVD en...