Lucene search
+L
Path-parse ProjectPath-parse*

1 matches found

CVE
CVE
added 2021/05/04 8:25 a.m.698 views

CVE-2021-23343

CVE-2021-23343 affects the path-parse package. The vulnerability is a Regular Expression Denial of Service (ReDoS) via the regexes splitDeviceRe, splitTailRe, and splitPathRe. The ReDoS has polynomial worst-case time complexity. Connected telemetry from MiracleLinux AXSA advisories lists path-par...

7.5CVSS7.2AI score0.02218EPSS
Save