Lucene search
+L

9 matches found

Github Security Blog
Github Security Blog
•added 2021/08/10 3:33 p.m.•91 views

Regular Expression Denial of Service in path-parse

Affected versions of npm package path-parse are vulnerable to Regular Expression Denial of Service ReDoS via splitDeviceRe, splitTailRe, and splitPathRe regular expressions. ReDoS exhibits polynomial worst-case time complexity...

7.5CVSS5.1AI score0.02218EPSS
SaveExploits1References8Affected Software1
Veracode
Veracode
•added 2021/05/05 5:46 a.m.•37 views

Regular Expression Denial Of Service (ReDoS)

path-parse is vulnerable to regular expression denial of service. An attacker is able to produce a denial of service condition in the application through worst-case time complexity via splitDeviceRe, splitTailRe and splitPathRe...

7.5CVSS3.6AI score0.02218EPSS
SaveExploits1References4Affected Software5
NVD
NVD
•added 2021/05/04 9:15 a.m.•39 views

CVE-2021-23343

All versions of package path-parse are vulnerable to Regular Expression Denial of Service ReDoS via splitDeviceRe, splitTailRe, and splitPathRe regular expressions. ReDoS exhibits polynomial worst-case time complexity...

7.5CVSS0.02218EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2021/05/04 8:25 a.m.•42 views

CVE-2021-23343 Regular Expression Denial of Service (ReDoS)

All versions of package path-parse are vulnerable to Regular Expression Denial of Service ReDoS via splitDeviceRe, splitTailRe, and splitPathRe regular expressions. ReDoS exhibits polynomial worst-case time complexity...

5.3CVSS8.7AI score0.02218EPSS
SaveExploits1References4
Mend
Mend
•added 2021/05/04 8:25 a.m.•2 views

CVE-2021-23343

All versions of package path-parse are vulnerable to Regular Expression Denial of Service ReDoS via splitDeviceRe, splitTailRe, and splitPathRe regular expressions. ReDoS exhibits polynomial worst-case time complexity...

7.5CVSS0.02218EPSS
SaveExploits1References8
CNNVD
CNNVD
•added 2021/05/04 12:00 a.m.•12 views

npm path-parse 安全漏洞

npm path-parse is an application plugin from the United States npm. It provides a path-parse function. A security vulnerability exists in path-parse, which originates from a Regular Expression Denial of Service ReDoS attack via the splitDeviceRe, splitTailRe, and splitPathRe regular expressions...

7.5CVSS7AI score0.02218EPSS
SaveExploits1References28
Positive Technologies
Positive Technologies
•added 2021/05/04 12:00 a.m.•4 views

PT-2021-15447

Name of the Vulnerable Software and Affected Versions path-parse versions all Description The issue is related to Regular Expression Denial of Service ReDoS via splitDeviceRe, splitTailRe, and splitPathRe regular expressions. ReDoS exhibits polynomial worst-case time complexity. Recommendations F...

9.8CVSS0.02218EPSS
SaveExploits1References84
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/04 12:00 a.m.•5 views

CVE-2021-23343: Undefined Security Weakness

All versions of package path-parse are vulnerable to Regular Expression Denial of Service ReDoS via splitDeviceRe, splitTailRe, and splitPathRe regular expressions. ReDoS exhibits polynomial worst-case time complexity...

7.5CVSS7.8AI score0.02218EPSS
SaveExploits1References1
Snyk
Snyk
•added 2021/02/19 3:54 p.m.•9 views

Regular Expression Denial of Service (ReDoS)

Overview path-parse is a Node.js path.parse ponyfill Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS via splitDeviceRe, splitTailRe, and splitPathRe regular expressions. ReDoS exhibits polynomial worst-case time complexity. PoC var pathParse =...

7.5CVSS7.2AI score0.02218EPSS
SaveExploits1References2
Rows per page
Query Builder