logo
DATABASE RESOURCES PRICING ABOUT US

CVE-2021-33502

Description

The normalize-url package before 4.5.1, 5.x before 5.3.1, and 6.x before 6.0.1 for Node.js has a ReDoS (regular expression denial of service) issue because it has exponential performance for data: URLs.


Affected Package


OS OS Version Package Name Package Version
ubuntu 20.04 node-got any
ubuntu 22.04 node-got any
ubuntu upstream node-got any
ubuntu upstream node-got any
ubuntu 20.04 node-yarnpkg any
ubuntu 22.04 node-yarnpkg any
ubuntu upstream node-yarnpkg any
ubuntu upstream node-yarnpkg any

Related