Lucene search
K

6 matches found

Github Security Blog
Github Security Blog
added 2021/08/10 3:33 p.m.75 views

Regular Expression Denial of Service in path-parse

Affected versions of npm package path-parse are vulnerable to Regular Expression Denial of Service ReDoS via splitDeviceRe, splitTailRe, and splitPathRe regular expressions. ReDoS exhibits polynomial worst-case time complexity...

7.5CVSS5.1AI score0.00506EPSS
Exploits1References8Affected Software1
Veracode
Veracode
added 2021/05/05 5:46 a.m.27 views

Regular Expression Denial Of Service (ReDoS)

path-parse is vulnerable to regular expression denial of service. An attacker is able to produce a denial of service condition in the application through worst-case time complexity via splitDeviceRe, splitTailRe and splitPathRe...

7.5CVSS3.6AI score0.00506EPSS
Exploits1References4Affected Software5
NVD
NVD
added 2021/05/04 9:15 a.m.21 views

CVE-2021-23343

All versions of package path-parse are vulnerable to Regular Expression Denial of Service ReDoS via splitDeviceRe, splitTailRe, and splitPathRe regular expressions. ReDoS exhibits polynomial worst-case time complexity...

7.5CVSS0.00506EPSS
Exploits1References4
Cvelist
Cvelist
added 2021/05/04 8:25 a.m.21 views

CVE-2021-23343 Regular Expression Denial of Service (ReDoS)

All versions of package path-parse are vulnerable to Regular Expression Denial of Service ReDoS via splitDeviceRe, splitTailRe, and splitPathRe regular expressions. ReDoS exhibits polynomial worst-case time complexity...

5.3CVSS8.7AI score0.00506EPSS
Exploits1References4
CNNVD
CNNVD
added 2021/05/04 12:0 a.m.1 views

npm path-parse 安全漏洞

npm path-parse is an application plugin from the United States npm. It provides a path-parse function. A security vulnerability exists in path-parse, which originates from a Regular Expression Denial of Service ReDoS attack via the splitDeviceRe, splitTailRe, and splitPathRe regular expressions...

7.5CVSS7AI score0.00506EPSS
Exploits1References28
Snyk
Snyk
added 2021/02/19 3:54 p.m.1 views

Regular Expression Denial of Service (ReDoS)

Overview path-parse is a Node.js path.parse ponyfill Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS via splitDeviceRe, splitTailRe, and splitPathRe regular expressions. ReDoS exhibits polynomial worst-case time complexity. PoC var pathParse =...

7.5CVSS7.2AI score0.00506EPSS
Exploits1References2
Rows per page
Query Builder