Lucene search
Veracode Vulnerability DatabaseVERACODE:30351HistoryMay 05, 2021 - 5:46 a.m.
Regular Expression Denial Of Service (ReDoS)
2021-05-0505:46:25
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
EPSS
0.003
Percentile
68.6%
path-parse is vulnerable to regular expression denial of service. An attacker is able to produce a denial of service condition in the application through worst-case time complexity via splitDeviceRe, splitTailRe and splitPathRe.
Related
redhatcve
redhatcve
CVE-2021-23343
2021-05-04 14:31:14
nvd
nvd
CVE-2021-23343
2021-05-04 09:15:07
osv
osv
CVE-2021-23343
2021-05-04 09:15:07
Regular Expression Denial of Service in path-parse
2021-08-10 15:33:47
Important: nodejs:14 security and bug fix update
2021-09-27 06:47:35
ibm
ibm
github
github
Regular Expression Denial of Service in path-parse
2021-08-10 15:33:47
cvelist
cvelist
CVE-2021-23343 Regular Expression Denial of Service (ReDoS)
2021-05-04 00:00:00
cve
cve
CVE-2021-23343
2021-05-04 09:15:07
nessus
nessus
RHEL 8 : nodejs-path-parse (Unpatched Vulnerability)
2024-05-11 00:00:00
RHEL 8 : RHV Manager (ovirt-engine) security update [ovirt-4.4.7] (Moderate) (RHSA-2021:2865)
2021-07-22 00:00:00
SUSE SLES12 Security Update : nodejs12 (SUSE-SU-2022:0531-1)
2022-02-22 00:00:00
nodejs
nodejs
Regular Expression Denial of Service in path-parse
2021-08-10 15:59:47
prion
prion
Code injection
2021-05-04 09:15:00
redhat
redhat
(RHSA-2021:2865) Moderate: RHV Manager (ovirt-engine) security update [ovirt-4.4.7]
2021-07-22 14:06:26
(RHSA-2021:3623) Important: nodejs:12 security and bug fix update
2021-09-21 12:33:58
(RHSA-2021:3666) Important: nodejs:14 security and bug fix update
2021-09-27 06:47:35
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2022:0569-1)
2022-02-25 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:0563-1)
2022-02-25 00:00:00
openSUSE: Security Advisory for nodejs12 (openSUSE-SU-2022:0657-1)
2022-03-03 00:00:00
suse
suse
Security update for nodejs12 (important)
2022-03-02 00:00:00
Security update for nodejs14 (important)
2022-03-04 00:00:00
Security update for nodejs8 (important)
2022-03-04 00:00:00
rocky
rocky
nodejs:14 security and bug fix update
2021-09-27 06:47:35
nodejs:12 security and bug fix update
2021-09-21 12:33:58
almalinux
almalinux
Important: nodejs:12 security and bug fix update
2021-09-21 12:33:58
Important: nodejs:14 security and bug fix update
2021-09-27 06:47:35
oraclelinux
oraclelinux
nodejs:14 security and bug fix update
2021-09-27 00:00:00
nodejs:12 security and bug fix update
2021-09-22 00:00:00