3 matches found
CVE-2021-23364
The package browserslist from 4.0.0 and before 4.16.5 are vulnerable to Regular Expression Denial of Service ReDoS during parsing of queries...
5.3CVSS6.8AI score0.02429EPSS
SaveExploits1
CVE-2021-23364
CVE-2021-23364 affects the package browserslist . Versions from 4.0.0 and earlier up to but not including 4.16.5 are vulnerable to a Regular Expression Denial of Service (ReDoS) during parsing of queries. The root cause is crude regex-based parsing that can incur excessive CPU for crafted inputs,...
5.3CVSS5.5AI score0.02429EPSS
SaveExploits1References5Affected Software1
20