Lucene search
+L

100 matches found

Github Security Blog
Github Security Blog
•added 2021/06/07 9:56 p.m.•1003 views

glob-parent vulnerable to Regular Expression Denial of Service in enclosure regex

This affects the package glob-parent before 5.1.2. The enclosure regex used to check for strings ending in enclosure containing path separator...

7.5CVSS8.4AI score0.04579EPSS
SaveExploits1References11Affected Software1
osv_ghsa
osv_ghsa
•added 2021/06/07 9:56 p.m.•20 views

GHSA-WW39-953V-WCQ6 glob-parent vulnerable to Regular Expression Denial of Service in enclosure regex

This affects the package glob-parent before 5.1.2. The enclosure regex used to check for strings ending in enclosure containing path separator...

7.5CVSS7.1AI score0.04579EPSS
SaveExploits1References11
osv_cve
osv_cve
•added 2021/06/03 4:15 p.m.•44 views

CVE-2020-28469

This affects the package glob-parent before 5.1.2. The enclosure regex used to check for strings ending in enclosure containing path separator...

7.5CVSS6.5AI score
SaveExploits0References7
osv_azl
osv_azl
•added 2021/06/03 4:15 p.m.•33 views

AZL-44118 CVE-2020-28469 affecting package nodejs-nodemon 2.0.3-5

This affects the package glob-parent before 5.1.2. The enclosure regex used to check for strings ending in enclosure containing path separator...

7.5CVSS6.7AI score0.04579EPSS
SaveExploits1References1
osv_debian
osv_debian
•added 2021/06/03 4:15 p.m.•6 views

DEBIAN-CVE-2020-28469

This affects the package glob-parent before 5.1.2. The enclosure regex used to check for strings ending in enclosure containing path separator...

7.5CVSS7.1AI score0.04579EPSS
SaveExploits1References1
osv_azl
osv_azl
•added 2021/06/03 4:15 p.m.•17 views

AZL-44862 CVE-2020-28469 affecting package js-jquery 3.5.0-4

This affects the package glob-parent before 5.1.2. The enclosure regex used to check for strings ending in enclosure containing path separator...

7.5CVSS6.7AI score0.04579EPSS
SaveExploits1References1
NVD
NVD
•added 2021/06/03 4:15 p.m.•26 views

CVE-2020-28469

This affects the package glob-parent before 5.1.2. The enclosure regex used to check for strings ending in enclosure containing path separator...

7.5CVSS0.04579EPSS
SaveExploits1References7
Prion
Prion
•added 2021/06/03 4:15 p.m.•33 views

Design/Logic Flaw

This affects the package glob-parent before 5.1.2. The enclosure regex used to check for strings ending in enclosure containing path separator...

5CVSS8.3AI score0.04579EPSS
SaveExploits1References7Affected Software2
Cvelist
Cvelist
•added 2021/06/03 3:15 p.m.•39 views

CVE-2020-28469 Regular Expression Denial of Service (ReDoS)

This affects the package glob-parent before 5.1.2. The enclosure regex used to check for strings ending in enclosure containing path separator...

5.3CVSS8.5AI score0.04579EPSS
SaveExploits1References7
Mend
Mend
•added 2021/06/03 3:15 p.m.•5 views

CVE-2020-28469

This affects the package glob-parent before 5.1.2. The enclosure regex used to check for strings ending in enclosure containing path separator...

7.5CVSS0.04579EPSS
SaveExploits1References10
Debian CVE
Debian CVE
•added 2021/06/03 3:15 p.m.•68 views

CVE-2020-28469

This affects the package glob-parent before 5.1.2. The enclosure regex used to check for strings ending in enclosure containing path separator...

7.5CVSS8.8AI score0.04579EPSS
SaveExploits1
CVE
CVE
•added 2021/06/03 3:15 p.m.•703 views

CVE-2020-28469

CVE-2020-28469 affects the glob-parent package prior to v5.1.2. The flaw arises from the enclosure-regex used to validate strings ending in an enclosure that contains a path separator. The described effect is a Regular Expression Denial of Service (ReDoS) scenario. Affected software/component: gl...

7.5CVSS7.2AI score0.04579EPSS
SaveExploits1References7Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/06/03 12:00 a.m.•7 views

CVE-2020-28469: Uncontrolled Resource Consumption

This affects the package glob-parent before 5.1.2. The enclosure regex used to check for strings ending in enclosure containing path separator...

7.5CVSS7.5AI score0.04579EPSS
SaveExploits1References2
IBM Security Bulletins
IBM Security Bulletins
•added 2021/05/11 2:53 p.m.•104 views

Security Bulletin: A security vulnerability in Node.js glob-parent module affects IBM Cloud Automation Manager.

Summary A security vulnerability in Node.js glob-parent module affects IBM Cloud Automation Manager. Vulnerability Details CVEID: CVE-2020-28469 DESCRIPTION: Node.js glob-parent module is vulnerable to a denial of service. By sending a specially-crafted request, a remote attacker could exploit th...

7.5CVSS1.9AI score0.04579EPSS
SaveExploits1Affected Software1
CNNVD
CNNVD
•added 2021/05/05 12:00 a.m.•9 views

nodejs 资源管理错误漏洞

nodejs is a JavaScript runtime environment based on the ChromeV8 engine by wrapping the Chromev8 engine and using event-driven and non-blocking IO applications make it possible to develop high-performance backend applications in Javascript. A resource management error vulnerability exists in...

7.5CVSS7.2AI score0.04579EPSS
SaveExploits1References39
RedHat Linux
RedHat Linux
•added 2021/05/04 8:14 p.m.•126 views

Moderate: Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.2.3 security and bug fix update

Red Hat Advanced Cluster Management for Kubernetes 2.2.3 General Availability release images, which fix several bugs and security issues. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a...

9.1CVSS6.9AI score0.16657EPSS
SaveExploits5References10
RedhatCVE
RedhatCVE
•added 2021/04/01 1:38 a.m.•83 views

CVE-2020-28469

A flaw was found in nodejs-glob-parent. The enclosure regex used to check for glob enclosures containing backslashes is vulnerable to Regular Expression Denial of Service attacks. This flaw allows an attacker to cause a denial of service if they can supply a malicious string to the glob-parent...

7.5CVSS2.9AI score0.04579EPSS
SaveExploits1References4
Veracode
Veracode
•added 2021/01/21 2:21 p.m.•71 views

Regular Expression Denial Of Service (ReDoS)

glob-parent is vulnerable to Regular Expression Denial Of Service ReDoS. The vulnerability exists as the enclosure regex used to check for strings ending in enclosure containing path separator has an unescaped exclamation mark...

7.5CVSS2.9AI score0.04579EPSS
SaveExploits1References5Affected Software6
Snyk
Snyk
•added 2021/01/12 12:42 p.m.•12 views

Regular Expression Denial of Service (ReDoS)

Overview glob-parent is a package that helps extracting the non-magic parent path from a glob string. Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS. The enclosure regex used to check for strings ending in enclosure containing path separator. PoC by...

7.5CVSS8.6AI score0.04579EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2021/01/12 12:00 a.m.•11 views

PT-2021-11537

Name of the Vulnerable Software and Affected Versions: glob-parent versions prior to 5.1.2 Description: The issue is related to the enclosure regex used to check for strings ending in enclosure containing path separator. Recommendations: For versions prior to 5.1.2, update to version 5.1.2 or lat...

7.5CVSS7.4AI score0.04579EPSS
SaveExploits1References84
Rows per page
Query Builder