Lucene search
+L
ChaijsGet-func-name

1 matches found

CVE
CVE
added 2023/09/26 6:19 p.m.299 views

CVE-2023-43646

CVE-2023-43646 affects the get-func-name module (NodeJS and browser) where versions before 2.0.1 are vulnerable to a Regular Expression Denial of Service (ReDoS) caused by imbalance in parentheses that triggers catastrophic backtracking and high CPU usage on malicious input (e.g., a tab-heavy str...

8.6CVSS7.7AI score0.01114EPSS
Save