Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-cwfw-4gq5-mrqx

Опубликовано: 06 янв. 2022
Источник: github
Github: Прошло ревью

Описание

Regular Expression Denial of Service (ReDoS) in braces

A vulnerability was found in Braces versions from v2.2.0 up to but not including v2.3.1. Affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS) attacks. This has been patched in version 2.3.1.

Пакеты

Наименование

braces

npm
Затронутые версииВерсия исправления

>= 2.2.0, < 2.3.1

2.3.1

EPSS

Процентиль: 70%
0.01363
Низкий

Дефекты

CWE-400

Связанные уязвимости

CVSS3: 5.3
ubuntu
больше 5 лет назад

A vulnerability was found in Braces versions 2.2.0 and above, prior to 2.3.1. Affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS) attacks.

CVSS3: 4
redhat
больше 8 лет назад

A vulnerability was found in Braces versions 2.2.0 and above, prior to 2.3.1. Affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS) attacks.

CVSS3: 5.3
nvd
больше 5 лет назад

A vulnerability was found in Braces versions 2.2.0 and above, prior to 2.3.1. Affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS) attacks.

CVSS3: 5.3
debian
больше 5 лет назад

A vulnerability was found in Braces versions 2.2.0 and above, prior to ...

CVSS3: 5.3
fstec
больше 8 лет назад

Уязвимость пакета Braces пакетного менеджера NPM, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 70%
0.01363
Низкий

Дефекты

CWE-400