Описание
Lodash versions prior to 4.17.21 are vulnerable to Regular Expression Denial of Service (ReDoS) via the toNumber, trim and trimEnd functions.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support, was needed |
| devel | not-affected | |
| esm-apps-legacy/xenial | not-affected | code not present |
| esm-apps/bionic | released | 4.17.4+dfsg-1ubuntu0.1~esm1 |
| esm-apps/focal | released | 4.17.15+dfsg-2ubuntu0.1~esm1 |
| esm-apps/jammy | not-affected | 4.17.21+dfsg+~cs8.31.198.20210220-5ubuntu0.1~esm1 |
| esm-apps/noble | not-affected | 4.17.21+dfsg+~cs8.31.198.20210220-9ubuntu0.24.04.1~esm1 |
| esm-apps/resolute | not-affected | 4.17.23+dfsg-1ubuntu0.1~esm1 |
| esm-apps/xenial | ignored | end of ESM support, was needs-triage |
| esm-infra-legacy/trusty | DNE |
Показывать по
Ссылки на источники
EPSS
5 Medium
CVSS2
5.3 Medium
CVSS3
Связанные уязвимости
Lodash versions prior to 4.17.21 are vulnerable to Regular Expression Denial of Service (ReDoS) via the toNumber, trim and trimEnd functions.
Lodash versions prior to 4.17.21 are vulnerable to Regular Expression Denial of Service (ReDoS) via the toNumber, trim and trimEnd functions.
Lodash versions prior to 4.17.21 are vulnerable to Regular Expression ...
Regular Expression Denial of Service (ReDoS) in lodash
Уязвимость функций toNumber, trim и trimEnd библиотеки lodash прикладного программного обеспечения Аврора Центр, связанная с неконтролируемым расходом ресурсов, позволяющая нарушителю вызвать отказ в обслуживании
EPSS
5 Medium
CVSS2
5.3 Medium
CVSS3