Lucene search
+L

4 matches found

OSV
OSV
added 2021/06/10 5:25 p.m.32 views

GHSA-39Q4-P535-C852 Uncontrolled Resource Consumption in locutus

The package locutus before 2.0.15 is vulnerable to Regular Expression Denial of Service ReDoS via the gopherparsedir function...

7.5CVSS5.9AI score0.01936EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2021/06/08 7:42 a.m.3 views

CVE-2021-23392

The package locutus before 2.0.15 are vulnerable to Regular Expression Denial of Service ReDoS via the gopherparsedir function...

7.5CVSS5.3AI score0.01936EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2021/06/08 12:0 a.m.7 views

locutus 安全漏洞

Locutus PHP is an open source PHP language standard library used in JavaScript. A security vulnerability exists in locutus versions prior to 2.0.15, which stems from the gopherparsedir function being susceptible to a denial of service ReDoS attack...

7.5CVSS7.2AI score0.01936EPSS
SaveExploits1References4
Snyk
Snyk
added 2021/04/05 12:11 p.m.6 views

Regular Expression Denial of Service (ReDoS)

Overview locutus is a Locutus other languages' stadard libraries to JavaScript for fun and educational purposes Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS via the gopherparsedir function. PoC by Yeting Li var gopherparsedir =...

7.5CVSS6.7AI score0.01936EPSS
SaveExploits1References2
Rows per page
Query Builder