Lucene search
+L

10 matches found

OSV
OSV
•added 2021/09/20 8:27 p.m.•3 views

GHSA-JGRX-MGXX-JF9V tmpl vulnerable to Inefficient Regular Expression Complexity which may lead to resource exhaustion

nodejs-tmpl is simple string formatting. tmpl is vulnerable to Inefficient Regular Expression Complexity which may lead to resource exhaustion...

7.5CVSS7.1AI score0.01309EPSS
SaveExploits1References4
NVD
NVD
•added 2021/09/15 8:15 a.m.•30 views

CVE-2021-3777

nodejs-tmpl is vulnerable to Inefficient Regular Expression Complexity...

7.8CVSS0.01309EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2021/09/15 8:15 a.m.•13 views

CVE-2021-3777

nodejs-tmpl is vulnerable to Inefficient Regular Expression Complexity...

7.8CVSS7.1AI score0.01309EPSS
SaveExploits1References3
Mend
Mend
•added 2021/09/15 7:15 a.m.•3 views

CVE-2021-3777

nodejs-tmpl is vulnerable to Inefficient Regular Expression Complexity...

8.7CVSS0.01309EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2021/09/15 7:15 a.m.•48 views

CVE-2021-3777 Inefficient Regular Expression Complexity in daaku/nodejs-tmpl

nodejs-tmpl is vulnerable to Inefficient Regular Expression Complexity...

7.5CVSS8.8AI score0.01309EPSS
SaveExploits1References2
CVE
CVE
•added 2021/09/15 7:15 a.m.•95 views

CVE-2021-3777

CVE-2021-3777: nodejs-tmpl is vulnerable to Inefficient Regular Expression Complexity (ReDoS). IBM X-Force lists CVSS v3.1 base score 7.5 (HIGH) with Network attack vector, no user interaction, and Availability impact. No remediation details are provided in the supplied documents.

7.8CVSS7.5AI score0.01309EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/09/15 12:00 a.m.•4 views

CVE-2021-3777: Inefficient Regular Expression Complexity

nodejs-tmpl is vulnerable to Inefficient Regular Expression Complexity...

7.8CVSS5.8AI score0.01309EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2021/09/15 12:00 a.m.•4 views

PT-2021-21868

Name of the Vulnerable Software and Affected Versions: nodejs-tmpl affected versions not specified Description: The issue concerns Inefficient Regular Expression Complexity in nodejs-tmpl, which may lead to resource exhaustion. There is no information provided about the estimated number of...

7.8CVSS0.01309EPSS
SaveExploits1References8
CNNVD
CNNVD
•added 2021/09/15 12:00 a.m.•23 views

nodejs-tmpl 安全漏洞

nodejs is a JavaScript runtime environment based on the ChromeV8 engine, by packaging the Chromev8 engine and the use of event-driven and non-blocking IO applications make it possible to develop high-performance background applications in Javascript. A security vulnerability exists in nodejs-tmpl...

7.8CVSS7.6AI score0.01309EPSS
SaveExploits1References3
Huntr
Huntr
•added 2021/09/04 4:23 p.m.•34 views

Inefficient Regular Expression Complexity in daaku/nodejs-tmpl

✍️ Description It allows cause a denial of service when formatting crafted string. 🕵️‍♂️ Proof of Concept // PoC.js var tmpl = require"tmpl" forvar i = 1; i = 50000; i++ var time = Date.now; var attackstr = ""+"".repeati10000+"answer"; tmplattackstr, answer: 42 var timecost = Date.now - time;...

7.8CVSS2.1AI score0.01309EPSS
SaveExploits1
Rows per page
Query Builder