Lucene search
+L

8 matches found

osv_ghsa
osv_ghsa
•added 2021/05/06 3:58 p.m.•85 views

GHSA-HPMR-G4PQ-JHGP Denial of service in chrono-node

This affects the package chrono-node before 2.2.4. It hangs on a date-like string with lots of embedded spaces...

7.5CVSS7.1AI score0.01987EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
•added 2021/05/06 3:58 p.m.•96 views

Denial of service in chrono-node

This affects the package chrono-node before 2.2.4. It hangs on a date-like string with lots of embedded spaces...

7.5CVSS3.2AI score0.01987EPSS
SaveExploits1References5Affected Software1
osv_cve
osv_cve
•added 2021/04/12 1:15 p.m.•35 views

CVE-2021-23371

This affects the package chrono-node before 2.2.4. It hangs on a date-like string with lots of embedded spaces...

7.5CVSS6.8AI score0.01987EPSS
SaveExploits1References3
Prion
Prion
•added 2021/04/12 1:15 p.m.•37 views

Design/Logic Flaw

This affects the package chrono-node before 2.2.4. It hangs on a date-like string with lots of embedded spaces...

5CVSS7.5AI score0.01987EPSS
SaveExploits1References3Affected Software1
Mend
Mend
•added 2021/04/12 1:10 p.m.•10 views

CVE-2021-23371

This affects the package chrono-node before 2.2.4. It hangs on a date-like string with lots of embedded spaces...

8.7CVSS0.01987EPSS
SaveExploits1References3
CVE
CVE
•added 2021/04/12 1:10 p.m.•88 views

CVE-2021-23371

The CVE-2021-23371 issue affects the npm package chrono-node prior to version 2.2.4, where parsing date-like strings containing a large number of embedded spaces can cause the application to hang. Public advisories and references (GitHub advisory GHSA-hpmr-g4pq-jhgp, OSV, CNVD/CNNVD entries, and ...

7.5CVSS7.5AI score0.01987EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/12 12:00 a.m.•12 views

CVE-2021-23371: Undefined Security Weakness

This affects the package chrono-node before 2.2.4. It hangs on a date-like string with lots of embedded spaces...

7.5CVSS5.8AI score0.01987EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2021/04/12 12:00 a.m.•6 views

PT-2021-15468

Name of the Vulnerable Software and Affected Versions chrono-node versions prior to 2.2.4 Description The issue causes the software to hang when it encounters a date-like string containing numerous embedded spaces. Recommendations For versions prior to 2.2.4, update to version 2.2.4 or later to...

7.5CVSS0.01987EPSS
SaveExploits1References8
Rows per page
Query Builder