Lucene search
Veracode Vulnerability DatabaseVERACODE:29782HistoryMar 23, 2021 - 1:26 a.m.
Regular Expression Denial Of Service (ReDoS)
2021-03-2301:26:23
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
0.001 Low
EPSS
Percentile
45.9%
es6-crawler-detect is vulnerable to regular expression denial of service. The vulnerability exists because user agent string length supplied to regex operators are not restricted, leading to no limit for the time module being run.
| CPE | Name | Operator | Version |
|---|---|---|---|
| es6-crawler-detect | le | 3.1.2 | |
| es6-crawler-detect | le | 3.1.2 |
Related
cvelist
cvelist
CVE-2020-28501 Regular Expression Denial of Service (ReDoS)
2021-03-22 00:00:00
cve
cve
CVE-2020-28501
2021-03-22 12:15:13
osv
osv
Regular Expression Denial of Service (ReDoS) in es6-crawler-detect
2021-04-13 15:19:39
nvd
nvd
CVE-2020-28501
2021-03-22 12:15:13
prion
prion
Design/Logic Flaw
2021-03-22 12:15:00
github
github
Regular Expression Denial of Service (ReDoS) in es6-crawler-detect
2021-04-13 15:19:39