Lucene search
+L
String Kit ProjectString Kit

1 matches found

CVE
CVE
added 2023/01/02 7:57 a.m.54 views

CVE-2021-4299

The CVE-2021-4299 issue affects cronvel string-kit up to v0.12.7, specifically the naturalSort function in lib/naturalSort.js. The vulnerability stems from inefficient regular-expression complexity, enabling a remote attacker to cause performance-based impact (DoS). Upgrading to v0.12.8 mitigates...

7.5CVSS5.8AI score0.00927EPSS
Save