Linux Distros Unpatched Vulnerability : CVE-2023-43646

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - get-func-name is a module to retrieve a function's name securely and consistently both in NodeJS and the browser. Versions prior to 2.0.1 are subject to a regul...

@hyperledger-cacti/cacti-copm-core (>=3.0.0-alpha.5, <=3.0.0-beta.1), @hyperledger-cacti/cacti-copm-test (>=3.0.0-alpha.5, <=3.0.0-beta.1) +7 more potentially affected by CVE-2023-43646 via get-func-name (2.0.0)

get-func-name NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on get-func-name and may be impacted: - @hyperledger-cacti/cacti-copm-core =3.0.0-alpha.5, =3.0.0-alpha.5, =3.0.0-alpha.5, =3.0.0-alpha.5, =3.0.0-alpha.5, =3.0.0-alpha.5,...

CVE-2023-43646 vulnerabilities

Vulnerabilities for packages: vitess...

CVE-2023-43646

get-func-name is a module to retrieve a function's name securely and consistently both in NodeJS and the browser. Versions prior to 2.0.1 are subject to a regular expression denial of service redos vulnerability which may lead to a denial of service when parsing malicious input. This vulnerabilit...

CVE-2023-43646 Inefficient Regular Expression Complexity in get-func-name

get-func-name is a module to retrieve a function's name securely and consistently both in NodeJS and the browser. Versions prior to 2.0.1 are subject to a regular expression denial of service redos vulnerability which may lead to a denial of service when parsing malicious input. This vulnerabilit...

CVE-2023-43646

CVE-2023-43646 affects the get-func-name module (NodeJS and browser) where versions before 2.0.1 are vulnerable to a Regular Expression Denial of Service (ReDoS) caused by imbalance in parentheses that triggers catastrophic backtracking and high CPU usage on malicious input (e.g., a tab-heavy str...