Lucene search
K

223 matches found

vulnersOsv
vulnersOsv
added 2021/05/10 6:44 p.m.2 views

02strich-markdown (>=1.0.0 <=1.0.2), 10secondsofcode-custom (=1.0.0) +11511 more potentially affected by CVE-2020-7753 via trim (=0.0.1)

trim NPM version =0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on trim and may be impacted: - 02strich-markdown =1.0.0, =1.0.0, =0.0.2, =0.0.1, =4.11.0, =0.1.0, =0.0.2, =0.2.0, =1.0.16, =1.2.0, =1.2.2 and more Source cves: CVE-2020-7753 Source...

7.5CVSS7.4AI score0.03732EPSS
Exploits1
Github Security Blog
Github Security Blog
added 2021/05/10 6:44 p.m.225 views

Regular Expression Denial of Service in trim

All versions of package trim lower than 0.0.3 are vulnerable to Regular Expression Denial of Service ReDoS via trim...

7.5CVSS7.5AI score0.03732EPSS
Exploits1References12Affected Software1
OSV
OSV
added 2021/05/10 6:44 p.m.34 views

GHSA-W5P7-H5W8-2HFQ Regular Expression Denial of Service in trim

All versions of package trim lower than 0.0.3 are vulnerable to Regular Expression Denial of Service ReDoS via trim...

7.5CVSS8.3AI score0.03732EPSS
Exploits1References12
RedhatCVE
RedhatCVE
added 2021/02/15 9:48 p.m.39 views

CVE-2020-28500

A flaw was found in nodejs-lodash. A Regular Expression Denial of Service ReDoS via the toNumber, trim and trimEnd functions is possible...

5.3CVSS3.4AI score0.07336EPSS
Exploits1References4
OSV
OSV
added 2021/02/15 11:15 a.m.3 views

DEBIAN-CVE-2020-28500

Lodash versions prior to 4.17.21 are vulnerable to Regular Expression Denial of Service ReDoS via the toNumber, trim and trimEnd functions...

5.3CVSS6.5AI score0.07336EPSS
Exploits1References1
NVD
NVD
added 2021/02/15 11:15 a.m.22 views

CVE-2020-28500

Lodash versions prior to 4.17.21 are vulnerable to Regular Expression Denial of Service ReDoS via the toNumber, trim and trimEnd functions...

5.3CVSS0.07336EPSS
Exploits1References14
OSV
OSV
added 2021/02/15 11:15 a.m.28 views

CVE-2020-28500

Lodash versions prior to 4.17.21 are vulnerable to Regular Expression Denial of Service ReDoS via the toNumber, trim and trimEnd functions...

5.3CVSS6.5AI score
Exploits0References14
UbuntuCve
UbuntuCve
added 2021/02/15 11:15 a.m.39 views

CVE-2020-28500

Lodash versions prior to 4.17.21 are vulnerable to Regular Expression Denial of Service ReDoS via the toNumber, trim and trimEnd functions...

5.3CVSS6.8AI score0.07336EPSS
Exploits1References8
Prion
Prion
added 2021/02/15 11:15 a.m.32 views

Design/Logic Flaw

Lodash versions prior to 4.17.21 are vulnerable to Regular Expression Denial of Service ReDoS via the toNumber, trim and trimEnd functions...

5CVSS6.2AI score0.07336EPSS
Exploits1References14Affected Software19
OSV
OSV
added 2021/02/15 11:15 a.m.0 views

UBUNTU-CVE-2020-28500

Lodash versions prior to 4.17.21 are vulnerable to Regular Expression Denial of Service ReDoS via the toNumber, trim and trimEnd functions...

5.3CVSS6.8AI score0.07336EPSS
Exploits1References10
Cvelist
Cvelist
added 2021/02/15 11:10 a.m.28 views

CVE-2020-28500 Regular Expression Denial of Service (ReDoS)

Lodash versions prior to 4.17.21 are vulnerable to Regular Expression Denial of Service ReDoS via the toNumber, trim and trimEnd functions...

5.3CVSS6.1AI score0.07336EPSS
Exploits1References14
Debian CVE
Debian CVE
added 2021/02/15 11:10 a.m.34 views

CVE-2020-28500

Lodash versions prior to 4.17.21 are vulnerable to Regular Expression Denial of Service ReDoS via the toNumber, trim and trimEnd functions...

5.3CVSS6.9AI score0.07336EPSS
Exploits1
Veracode
Veracode
added 2020/10/28 12:28 a.m.27 views

Regular Expression Denial Of Service (ReDoS)

trim is vulnerable to regular expression denial of service ReDoS. An attacker can pass a malicious string input str via trim to cause a resource exhaustion and an application crash...

7.5CVSS3.9AI score0.03732EPSS
Exploits1References13Affected Software1
OSV
OSV
added 2020/10/27 9:15 a.m.1 views

CVE-2020-7753

All versions of package trim are vulnerable to Regular Expression Denial of Service ReDoS via trim...

7.5CVSS7.2AI score
Exploits0References8
NVD
NVD
added 2020/10/27 9:15 a.m.19 views

CVE-2020-7753

All versions of package trim are vulnerable to Regular Expression Denial of Service ReDoS via trim...

7.5CVSS7.6AI score0.03732EPSS
Exploits1References8
Prion
Prion
added 2020/10/27 9:15 a.m.19 views

Design/Logic Flaw

All versions of package trim are vulnerable to Regular Expression Denial of Service ReDoS via trim...

5CVSS7.4AI score0.03732EPSS
Exploits1References8
CVE
CVE
added 2020/10/27 8:15 a.m.168 views

CVE-2020-7753

CVE-2020-7753: The Connected IBM bulletin confirms that the trim package is vulnerable to Regular Expression Denial of Service (ReDoS) via trim() in all versions. It assigns a high base score (7.5) and references IBM X-Force data; however, the bulletin does not publicly specify a patched version ...

7.5CVSS7.5AI score0.03732EPSS
Exploits1References8Affected Software1
Cvelist
Cvelist
added 2020/10/27 8:15 a.m.22 views

CVE-2020-7753 Regular Expression Denial of Service (ReDoS)

All versions of package trim are vulnerable to Regular Expression Denial of Service ReDoS via trim...

7.5CVSS8.3AI score0.03732EPSS
Exploits1References8
Positive Technologies
Positive Technologies
added 2020/10/27 12:0 a.m.3 views

PT-2020-6965

Name of the Vulnerable Software and Affected Versions trim versions prior to 0.0.3 trim affected versions not specified, but all versions are mentioned as vulnerable in some sources Description The issue is related to the trim function in the trim package, which is vulnerable to Regular Expressio...

7.8CVSS7.9AI score0.03732EPSS
Exploits1References186
Snyk
Snyk
added 2020/10/16 4:47 p.m.7 views

Regular Expression Denial of Service (ReDoS)

Overview lodash is a modern JavaScript utility library delivering modularity, performance, & extras. Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS via the toNumber, trim and trimEnd functions. POC var lo = require'lodash'; function buildblank n var...

5.3CVSS8AI score0.07336EPSS
Exploits1References2
Rows per page
Query Builder