Lucene search
+L

35 matches found

OSV
OSV
•added 2021/08/10 3:33 p.m.•24 views

GHSA-HJ48-42VR-X3V9 Regular Expression Denial of Service in path-parse

Affected versions of npm package path-parse are vulnerable to Regular Expression Denial of Service ReDoS via splitDeviceRe, splitTailRe, and splitPathRe regular expressions. ReDoS exhibits polynomial worst-case time complexity...

5.3CVSS6.8AI score0.02218EPSS
SaveExploits1References8
RedHat Linux
RedHat Linux
•added 2021/07/22 3:14 p.m.•11 views

nodejs-path-parse: ReDoS via splitDeviceRe, splitTailRe and splitPathRe

A flaw was found in nodejs-path-parse. All versions of package path-parse are vulnerable to Regular Expression Denial of Service ReDoS via splitDeviceRe, splitTailRe, and splitPathRe regular expressions. ReDoS exhibits polynomial worst-case time complexity...

7.5CVSS7.1AI score0.02218EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
•added 2021/07/22 3:14 p.m.•62 views

Moderate: Red Hat Security Advisory: RHV Manager (ovirt-engine) security update [ovirt-4.4.7]

Updated ovirt-engine packages that fix several bugs and add various enhancements are now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available f...

7.5CVSS7AI score0.04579EPSS
SaveExploits5References27
OSV
OSV
•added 2021/07/10 11:04 a.m.•13 views

OESA-2021-1262 nodejs-path-parse security update

Node.js path.parse ponyfill Security Fixes: All versions of package path-parse are vulnerable to Regular Expression Denial of Service ReDoS via splitDeviceRe, splitTailRe, and splitPathRe regular expressions. ReDoS exhibits polynomial worst-case time complexity.CVE-2021-23343...

7.5CVSS7AI score0.02218EPSS
SaveExploits1References2
Veracode
Veracode
•added 2021/05/05 5:46 a.m.•36 views

Regular Expression Denial Of Service (ReDoS)

path-parse is vulnerable to regular expression denial of service. An attacker is able to produce a denial of service condition in the application through worst-case time complexity via splitDeviceRe, splitTailRe and splitPathRe...

7.5CVSS3.6AI score0.02218EPSS
SaveExploits1References4Affected Software5
RedhatCVE
RedhatCVE
•added 2021/05/04 2:31 p.m.•54 views

CVE-2021-23343

A flaw was found in nodejs-path-parse. All versions of package path-parse are vulnerable to Regular Expression Denial of Service ReDoS via splitDeviceRe, splitTailRe, and splitPathRe regular expressions. ReDoS exhibits polynomial worst-case time complexity...

7.5CVSS4.8AI score0.02218EPSS
SaveExploits1References4
NVD
NVD
•added 2021/05/04 9:15 a.m.•38 views

CVE-2021-23343

All versions of package path-parse are vulnerable to Regular Expression Denial of Service ReDoS via splitDeviceRe, splitTailRe, and splitPathRe regular expressions. ReDoS exhibits polynomial worst-case time complexity...

7.5CVSS0.02218EPSS
SaveExploits1References4
CVE
CVE
•added 2021/05/04 8:25 a.m.•737 views

CVE-2021-23343

CVE-2021-23343 affects the path-parse package. The vulnerability is a Regular Expression Denial of Service (ReDoS) via the regexes splitDeviceRe, splitTailRe, and splitPathRe. The ReDoS has polynomial worst-case time complexity. Connected telemetry from MiracleLinux AXSA advisories lists path-par...

7.5CVSS7.2AI score0.02218EPSS
SaveExploits1References4Affected Software1
Mend
Mend
•added 2021/05/04 8:25 a.m.•0 views

CVE-2021-23343

All versions of package path-parse are vulnerable to Regular Expression Denial of Service ReDoS via splitDeviceRe, splitTailRe, and splitPathRe regular expressions. ReDoS exhibits polynomial worst-case time complexity...

7.5CVSS0.02218EPSS
SaveExploits1References8
attackerkb
attackerkb
•added 2021/05/04 8:24 a.m.•1 views

CVE-2021-23343

All versions of package path-parse are vulnerable to Regular Expression Denial of Service ReDoS via splitDeviceRe, splitTailRe, and splitPathRe regular expressions. ReDoS exhibits polynomial worst-case time complexity...

7.5CVSS8.8AI score0.02218EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2021/05/04 12:00 a.m.•11 views

npm path-parse 安全漏洞

npm path-parse is an application plugin from the United States npm. It provides a path-parse function. A security vulnerability exists in path-parse, which originates from a Regular Expression Denial of Service ReDoS attack via the splitDeviceRe, splitTailRe, and splitPathRe regular expressions...

7.5CVSS7AI score0.02218EPSS
SaveExploits1References28
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/04 12:00 a.m.•4 views

CVE-2021-23343: Undefined Security Weakness

All versions of package path-parse are vulnerable to Regular Expression Denial of Service ReDoS via splitDeviceRe, splitTailRe, and splitPathRe regular expressions. ReDoS exhibits polynomial worst-case time complexity...

7.5CVSS7.8AI score0.02218EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2021/05/04 12:00 a.m.•4 views

PT-2021-15447

Name of the Vulnerable Software and Affected Versions path-parse versions all Description The issue is related to Regular Expression Denial of Service ReDoS via splitDeviceRe, splitTailRe, and splitPathRe regular expressions. ReDoS exhibits polynomial worst-case time complexity. Recommendations F...

9.8CVSS0.02218EPSS
SaveExploits1References84
vulnersOsv
vulnersOsv
•added 2021/02/19 3:54 p.m.•4 views

960.css (1.0.0), @4site/engrid-styles (>=0.2.19, <=0.2.24) +120 more potentially affected by CVE-2021-23343 via path-parse (>=1.0.5, <=1.0.6)

path-parse NPM version =1.0.5, =0.2.19, =0.1.1, =7.0.0-2, =0.2.0, =0.17.0, =0.17.0, =0.19.0, =0.17.0, =0.23.0, =0.17.0, =0.17.0, =0.17.1 - @choerodon/issue 0.17.0 and more Source cves: CVE-2021-23343 Source advisory: SNYK:JS-PATHPARSE-1077067...

7.5CVSS6.8AI score0.02218EPSS
SaveExploits1
Snyk
Snyk
•added 2021/02/19 3:54 p.m.•9 views

Regular Expression Denial of Service (ReDoS)

Overview path-parse is a Node.js path.parse ponyfill Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS via splitDeviceRe, splitTailRe, and splitPathRe regular expressions. ReDoS exhibits polynomial worst-case time complexity. PoC var pathParse =...

7.5CVSS7.2AI score0.02218EPSS
SaveExploits1References2
Rows per page
Query Builder