Lucene search
+L

4 matches found

Github Security Blog
Github Security Blog
added 2023/09/27 8:16 p.m.64 views

Chaijs/get-func-name vulnerable to ReDoS

The current regex implementation for parsing values in the module is susceptible to excessive backtracking, leading to potential DoS attacks. The regex implementation in question is as follows: js const functionNameMatch = /\sfunction?:\s|\s/^?:/+\/\s^\s/+/; This vulnerability can be exploited...

8.6CVSS6.9AI score0.01114EPSS
SaveExploits1References5Affected Software1
Debian CVE
Debian CVE
added 2023/09/26 6:19 p.m.82 views

CVE-2023-43646

get-func-name is a module to retrieve a function's name securely and consistently both in NodeJS and the browser. Versions prior to 2.0.1 are subject to a regular expression denial of service redos vulnerability which may lead to a denial of service when parsing malicious input. This vulnerabilit...

8.6CVSS6.3AI score0.01114EPSS
SaveExploits1
Cvelist
Cvelist
added 2023/09/26 6:19 p.m.66 views

CVE-2023-43646 Inefficient Regular Expression Complexity in get-func-name

get-func-name is a module to retrieve a function's name securely and consistently both in NodeJS and the browser. Versions prior to 2.0.1 are subject to a regular expression denial of service redos vulnerability which may lead to a denial of service when parsing malicious input. This vulnerabilit...

8.6CVSS8.5AI score0.01114EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2023/09/26 6:19 p.m.20 views

CVE-2023-43646 Inefficient Regular Expression Complexity in get-func-name

get-func-name is a module to retrieve a function's name securely and consistently both in NodeJS and the browser. Versions prior to 2.0.1 are subject to a regular expression denial of service redos vulnerability which may lead to a denial of service when parsing malicious input. This vulnerabilit...

8.6CVSS6.6AI score0.01114EPSS
SaveExploits1References2
Rows per page
Query Builder