Lucene search
+L

52 matches found

Veracode
Veracode
added 2021/03/24 4:3 a.m.37 views

Regular Expression Denial Of Service (ReDoS)

hosted-git-info is vulnerable to regular expression denial of service ReDoS. An attacker can provide a malicious string via shortcutMatch in the function fromUrl in index.js to crash the application...

5.3CVSS3AI score0.03612EPSS
Exploits1References6Affected Software3
NVD
NVD
added 2021/03/23 5:15 p.m.19 views

CVE-2021-23362

The package hosted-git-info before 3.0.8 are vulnerable to Regular Expression Denial of Service ReDoS via regular expression shortcutMatch in the fromUrl function in index.js. The affected regular expression exhibits polynomial worst-case time complexity...

5.3CVSS0.03612EPSS
Exploits1References7
OSV
OSV
added 2021/03/23 5:15 p.m.1 views

DEBIAN-CVE-2021-23362

The package hosted-git-info before 3.0.8 are vulnerable to Regular Expression Denial of Service ReDoS via regular expression shortcutMatch in the fromUrl function in index.js. The affected regular expression exhibits polynomial worst-case time complexity...

5.3CVSS6.8AI score0.03612EPSS
Exploits1References1
OSV
OSV
added 2021/03/23 5:15 p.m.10 views

AZL-44058 CVE-2021-23362 affecting package js-jquery 3.5.0-4

The package hosted-git-info before 3.0.8 are vulnerable to Regular Expression Denial of Service ReDoS via regular expression shortcutMatch in the fromUrl function in index.js. The affected regular expression exhibits polynomial worst-case time complexity...

5.3CVSS6.7AI score0.03612EPSS
Exploits1References1
OSV
OSV
added 2021/03/23 5:15 p.m.22 views

CVE-2021-23362

The package hosted-git-info before 3.0.8 are vulnerable to Regular Expression Denial of Service ReDoS via regular expression shortcutMatch in the fromUrl function in index.js. The affected regular expression exhibits polynomial worst-case time complexity...

5.3CVSS6.5AI score
Exploits0References7
Prion
Prion
added 2021/03/23 5:15 p.m.21 views

Design/Logic Flaw

The package hosted-git-info before 3.0.8 are vulnerable to Regular Expression Denial of Service ReDoS via regular expression shortcutMatch in the fromUrl function in index.js. The affected regular expression exhibits polynomial worst-case time complexity...

5CVSS6AI score0.03612EPSS
Exploits1References7Affected Software2
OSV
OSV
added 2021/03/23 5:15 p.m.6 views

UBUNTU-CVE-2021-23362

The package hosted-git-info before 3.0.8 are vulnerable to Regular Expression Denial of Service ReDoS via regular expression shortcutMatch in the fromUrl function in index.js. The affected regular expression exhibits polynomial worst-case time complexity...

5.3CVSS6.7AI score0.03612EPSS
Exploits1References6
CVE
CVE
added 2021/03/23 4:20 p.m.319 views

CVE-2021-23362

CVE-2021-23362 affects the Node.js package hosted-git-info prior to 3.0.8. The vulnerability is a Regular Expression Denial of Service (ReDoS) in the fromUrl function, caused by a regex shortcutMatch that can exhibit polynomial worst-case time. Affected detail: Regular expression complexity leads...

5.3CVSS6.5AI score0.03612EPSS
Exploits1References7Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/03/23 4:17 p.m.0 views

CVE-2021-23362

The package hosted-git-info before 3.0.8 are vulnerable to Regular Expression Denial of Service ReDoS via regular expression shortcutMatch in the fromUrl function in index.js. The affected regular expression exhibits polynomial worst-case time complexity...

5.3CVSS5.3AI score0.03612EPSS
Exploits1References8
CNNVD
CNNVD
added 2021/03/23 12:0 a.m.3 views

Ruy Adorno hosted-git-info 安全漏洞

Ruy Adorno hosted-git-info is a Ruy Adorno open source application . It provides the ability to recognize and convert various git host URLs between protocols. hosted-git-info before 3.0.8 A security vulnerability exists that stems from vulnerability to a shortcutMatch regular expression denial of...

5.3CVSS7AI score0.03612EPSS
Exploits1References26
Positive Technologies
Positive Technologies
added 2021/03/23 12:0 a.m.12 views

PT-2021-5825 · Unknown +8 · Hosted-Git-Info +8

Name of the Vulnerable Software and Affected Versions: hosted-git-info versions prior to 3.0.8 Description: The issue is related to a Regular Expression Denial of Service ReDoS in the fromUrl function in index.js. This occurs due to the shortcutMatch regular expression, which exhibits polynomial...

9.8CVSS6.5AI score0.69062EPSS
Exploits9References130
Snyk
Snyk
added 2020/11/28 12:0 a.m.3 views

Regular Expression Denial of Service (ReDoS)

Overview hosted-git-info is a Provides metadata and conversions from repository urls for Github, Bitbucket and Gitlab Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS via regular expression shortcutMatch in the fromUrl function in index.js. The affect...

5.3CVSS7.3AI score0.03612EPSS
Exploits1References2
Rows per page
Query Builder