Описание
index.js in brace-expansion before 1.1.7 is vulnerable to Regular Expression Denial of Service (ReDoS) attacks, as demonstrated by an expand argument containing many comma characters.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | not-affected | 1.1.8-1 |
| devel | not-affected | |
| esm-infra-legacy/trusty | DNE | |
| precise/esm | DNE | |
| trusty | DNE | |
| trusty/esm | DNE | |
| upstream | released | 1.1.8-1 |
| xenial | DNE |
Показывать по
10
5 Medium
CVSS2
7.5 High
CVSS3
Связанные уязвимости
CVSS3: 5.3
redhat
почти 9 лет назад
index.js in brace-expansion before 1.1.7 is vulnerable to Regular Expression Denial of Service (ReDoS) attacks, as demonstrated by an expand argument containing many comma characters.
CVSS3: 7.5
nvd
около 8 лет назад
index.js in brace-expansion before 1.1.7 is vulnerable to Regular Expression Denial of Service (ReDoS) attacks, as demonstrated by an expand argument containing many comma characters.
CVSS3: 7.5
debian
около 8 лет назад
index.js in brace-expansion before 1.1.7 is vulnerable to Regular Expr ...
5 Medium
CVSS2
7.5 High
CVSS3