Lucene search
+L

4 matches found

nodejs
nodejs
added 2021/05/10 6:48 p.m.60 views

Regular Expression Denial of Service

Overview All versions of package dat.gui are vulnerable to Regular Expression Denial of Service ReDoS via specifically crafted rgb and rgba values. Recommendation Avoid using dat.gui as there is no current safe version of this module References - CVE - GitHub Advisory...

5CVSS5.2AI score0.02099EPSS
SaveExploits1Affected Software1
NVD
NVD
added 2020/10/27 6:15 p.m.31 views

CVE-2020-7755

All versions of package dat.gui are vulnerable to Regular Expression Denial of Service ReDoS via specifically crafted rgb and rgba values...

7.5CVSS7.5AI score0.02099EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2020/10/27 5:45 p.m.36 views

CVE-2020-7755 Regular Expression Denial of Service (ReDoS)

All versions of package dat.gui are vulnerable to Regular Expression Denial of Service ReDoS via specifically crafted rgb and rgba values...

7.5CVSS7.5AI score0.02099EPSS
SaveExploits1References2
CVE
CVE
added 2020/10/27 5:45 p.m.59 views

CVE-2020-7755

CVE-2020-7755 affects the JavaScript package dat.gui. All versions are vulnerable to a Regular Expression Denial of Service (ReDoS) triggered by specially crafted rgb/rgba values, due to a problematic regex pattern (e.g., in interpret.js per Veracode reference). Impact is potential DoS; exploitat...

7.5CVSS7.5AI score0.02099EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder