Lucene search
+L

8 matches found

osv_ghsa
osv_ghsa
•added 2021/05/06 3:58 p.m.•77 views

GHSA-HPMR-G4PQ-JHGP Denial of service in chrono-node

This affects the package chrono-node before 2.2.4. It hangs on a date-like string with lots of embedded spaces...

7.5CVSS7.1AI score0.01987EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
•added 2021/05/06 3:58 p.m.•68 views

Denial of service in chrono-node

This affects the package chrono-node before 2.2.4. It hangs on a date-like string with lots of embedded spaces...

7.5CVSS3.2AI score0.01987EPSS
SaveExploits1References5Affected Software1
osv_cve
osv_cve
•added 2021/04/12 1:15 p.m.•29 views

CVE-2021-23371

This affects the package chrono-node before 2.2.4. It hangs on a date-like string with lots of embedded spaces...

7.5CVSS6.8AI score
SaveExploits0References3
Prion
Prion
•added 2021/04/12 1:15 p.m.•33 views

Design/Logic Flaw

This affects the package chrono-node before 2.2.4. It hangs on a date-like string with lots of embedded spaces...

5CVSS7.5AI score0.01987EPSS
SaveExploits1References3Affected Software1
Mend
Mend
•added 2021/04/12 1:10 p.m.•6 views

CVE-2021-23371

This affects the package chrono-node before 2.2.4. It hangs on a date-like string with lots of embedded spaces...

8.7CVSS0.01987EPSS
SaveExploits1References3
CVE
CVE
•added 2021/04/12 1:10 p.m.•79 views

CVE-2021-23371

The CVE-2021-23371 issue affects the npm package chrono-node prior to version 2.2.4, where parsing date-like strings containing a large number of embedded spaces can cause the application to hang. Public advisories and references (GitHub advisory GHSA-hpmr-g4pq-jhgp, OSV, CNVD/CNNVD entries, and ...

7.5CVSS7.5AI score0.01987EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
•added 2021/04/12 12:00 a.m.•4 views

PT-2021-15468

Name of the Vulnerable Software and Affected Versions chrono-node versions prior to 2.2.4 Description The issue causes the software to hang when it encounters a date-like string containing numerous embedded spaces. Recommendations For versions prior to 2.2.4, update to version 2.2.4 or later to...

7.5CVSS0.01987EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/12 12:00 a.m.•11 views

CVE-2021-23371: Undefined Security Weakness

This affects the package chrono-node before 2.2.4. It hangs on a date-like string with lots of embedded spaces...

7.5CVSS5.8AI score0.01987EPSS
SaveExploits1References1
Rows per page
Query Builder