Lucene search
+L

3 matches found

Github Security Blog
Github Security Blog
added 2018/08/29 11:4 p.m.25 views

Regular Expression Denial of Service in timespan

Affected versions of timespan are vulnerable to a regular expression denial of service when parsing dates. The amplification for this vulnerability is significant, with 50,000 characters resulting in the event loop being blocked for around 10 seconds. Recommendation No direct patch is available f...

7.5CVSS4.6AI score0.01503EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2018/03/05 6:35 p.m.8 views

GHSA-446M-MV8F-Q348 Regular Expression Denial of Service in moment

Affected versions of moment are vulnerable to a low severity regular expression denial of service when parsing dates as strings. Recommendation Update to version 2.19.3 or later...

7.5CVSS6.7AI score0.03673EPSS
SaveExploits0References8
nodejs
nodejs
added 2017/09/21 8:40 p.m.70 views

Regular Expression Denial of Service

Overview Affected versions of moment are vulnerable to a low severity regular expression denial of service when parsing dates as strings. Recommendation Update to version 2.19.3 or later. References - Issue 4163 - PR 4326 - GitHub Advisory...

6.7AI score
SaveExploits0Affected Software1
Rows per page
Query Builder