Lucene search
+L

12 matches found

Github Security Blog
Github Security Blog
•added 2021/08/10 3:33 p.m.•92 views

Regular Expression Denial of Service in path-parse

Affected versions of npm package path-parse are vulnerable to Regular Expression Denial of Service ReDoS via splitDeviceRe, splitTailRe, and splitPathRe regular expressions. ReDoS exhibits polynomial worst-case time complexity...

7.5CVSS5.1AI score0.02218EPSS
SaveExploits1References8Affected Software1
Veracode
Veracode
•added 2021/05/05 5:46 a.m.•37 views

Regular Expression Denial Of Service (ReDoS)

path-parse is vulnerable to regular expression denial of service. An attacker is able to produce a denial of service condition in the application through worst-case time complexity via splitDeviceRe, splitTailRe and splitPathRe...

7.5CVSS3.6AI score0.02218EPSS
SaveExploits1References4Affected Software5
NVD
NVD
•added 2021/05/04 9:15 a.m.•39 views

CVE-2021-23343

All versions of package path-parse are vulnerable to Regular Expression Denial of Service ReDoS via splitDeviceRe, splitTailRe, and splitPathRe regular expressions. ReDoS exhibits polynomial worst-case time complexity...

7.5CVSS0.02218EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2021/05/04 8:25 a.m.•42 views

CVE-2021-23343 Regular Expression Denial of Service (ReDoS)

All versions of package path-parse are vulnerable to Regular Expression Denial of Service ReDoS via splitDeviceRe, splitTailRe, and splitPathRe regular expressions. ReDoS exhibits polynomial worst-case time complexity...

5.3CVSS8.7AI score0.02218EPSS
SaveExploits1References4
Mend
Mend
•added 2021/05/04 8:25 a.m.•2 views

CVE-2021-23343

All versions of package path-parse are vulnerable to Regular Expression Denial of Service ReDoS via splitDeviceRe, splitTailRe, and splitPathRe regular expressions. ReDoS exhibits polynomial worst-case time complexity...

7.5CVSS0.02218EPSS
SaveExploits1References8
CNNVD
CNNVD
•added 2021/05/04 12:00 a.m.•12 views

npm path-parse 安全漏洞

npm path-parse is an application plugin from the United States npm. It provides a path-parse function. A security vulnerability exists in path-parse, which originates from a Regular Expression Denial of Service ReDoS attack via the splitDeviceRe, splitTailRe, and splitPathRe regular expressions...

7.5CVSS7AI score0.02218EPSS
SaveExploits1References28
Positive Technologies
Positive Technologies
•added 2021/05/04 12:00 a.m.•4 views

PT-2021-15447

Name of the Vulnerable Software and Affected Versions path-parse versions all Description The issue is related to Regular Expression Denial of Service ReDoS via splitDeviceRe, splitTailRe, and splitPathRe regular expressions. ReDoS exhibits polynomial worst-case time complexity. Recommendations F...

9.8CVSS0.02218EPSS
SaveExploits1References84
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/04 12:00 a.m.•5 views

CVE-2021-23343: Undefined Security Weakness

All versions of package path-parse are vulnerable to Regular Expression Denial of Service ReDoS via splitDeviceRe, splitTailRe, and splitPathRe regular expressions. ReDoS exhibits polynomial worst-case time complexity...

7.5CVSS7.8AI score0.02218EPSS
SaveExploits1References1
Snyk
Snyk
•added 2021/02/19 3:54 p.m.•9 views

Regular Expression Denial of Service (ReDoS)

Overview path-parse is a Node.js path.parse ponyfill Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS via splitDeviceRe, splitTailRe, and splitPathRe regular expressions. ReDoS exhibits polynomial worst-case time complexity. PoC var pathParse =...

7.5CVSS7.2AI score0.02218EPSS
SaveExploits1References2
OSV
OSV
•added 2018/05/17 2:29 p.m.•14 views

DEBIAN-CVE-2018-7158

The 'path' module in the Node.js 4.x release line contains a potential regular expression denial of service ReDoS vector. The code in question was replaced in Node.js 6.x and later so this vulnerability only impacts all versions of Node.js 4.x. The regular expression, splitPathRe, used within the...

7.5CVSS9AI score0.03409EPSS
SaveExploits0References1
OSV
OSV
•added 2018/05/17 2:29 p.m.•16 views

UBUNTU-CVE-2018-7158

The 'path' module in the Node.js 4.x release line contains a potential regular expression denial of service ReDoS vector. The code in question was replaced in Node.js 6.x and later so this vulnerability only impacts all versions of Node.js 4.x. The regular expression, splitPathRe, used within the...

7.5CVSS7AI score0.03409EPSS
SaveExploits0References2
OSV
OSV
•added 2018/05/17 2:29 p.m.•10 views

ALPINE-CVE-2018-7158

The 'path' module in the Node.js 4.x release line contains a potential regular expression denial of service ReDoS vector. The code in question was replaced in Node.js 6.x and later so this vulnerability only impacts all versions of Node.js 4.x. The regular expression, splitPathRe, used within the...

7.5CVSS8.8AI score0.03409EPSS
SaveExploits0References1
Rows per page
Query Builder