Логотип exploitDog
bind: "CVE-2024-4068"
Консоль
Логотип exploitDog

exploitDog

bind: "CVE-2024-4068"

Количество 10

Количество 10

ubuntu логотип

CVE-2024-4068

около 1 года назад

The NPM package `braces`, versions prior to 3.0.3, fails to limit the number of characters it can handle, which could lead to Memory Exhaustion. In `lib/parse.js,` if a malicious user sends "imbalanced braces" as input, the parsing will enter a loop, which will cause the program to start allocating heap memory without freeing it at any moment of the loop. Eventually, the JavaScript heap limit is reached, and the program will crash.

CVSS3: 7.5
EPSS: Низкий
redhat логотип

CVE-2024-4068

больше 1 года назад

The NPM package `braces`, versions prior to 3.0.3, fails to limit the number of characters it can handle, which could lead to Memory Exhaustion. In `lib/parse.js,` if a malicious user sends "imbalanced braces" as input, the parsing will enter a loop, which will cause the program to start allocating heap memory without freeing it at any moment of the loop. Eventually, the JavaScript heap limit is reached, and the program will crash.

CVSS3: 7.5
EPSS: Низкий
nvd логотип

CVE-2024-4068

около 1 года назад

The NPM package `braces`, versions prior to 3.0.3, fails to limit the number of characters it can handle, which could lead to Memory Exhaustion. In `lib/parse.js,` if a malicious user sends "imbalanced braces" as input, the parsing will enter a loop, which will cause the program to start allocating heap memory without freeing it at any moment of the loop. Eventually, the JavaScript heap limit is reached, and the program will crash.

CVSS3: 7.5
EPSS: Низкий
msrc логотип

CVE-2024-4068

около 1 года назад

CVSS3: 7.5
EPSS: Низкий
debian логотип

CVE-2024-4068

около 1 года назад

The NPM package `braces`, versions prior to 3.0.3, fails to limit the ...

CVSS3: 7.5
EPSS: Низкий
github логотип

GHSA-grv7-fg5c-xmjg

около 1 года назад

Uncontrolled resource consumption in braces

CVSS3: 7.5
EPSS: Низкий
fstec логотип

BDU:2024-09427

больше 1 года назад

Уязвимость библиотеки braces, связанная с неконтролируемым потреблением ресурсов, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 7.5
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:1326-1

2 месяца назад

Security update for pgadmin4

EPSS: Низкий
redos логотип

ROS-20241029-08

8 месяцев назад

Множественные уязвимости opensearch

CVSS3: 7.5
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2024:3771-1

8 месяцев назад

Security update for pgadmin4

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2024-4068

The NPM package `braces`, versions prior to 3.0.3, fails to limit the number of characters it can handle, which could lead to Memory Exhaustion. In `lib/parse.js,` if a malicious user sends "imbalanced braces" as input, the parsing will enter a loop, which will cause the program to start allocating heap memory without freeing it at any moment of the loop. Eventually, the JavaScript heap limit is reached, and the program will crash.

CVSS3: 7.5
0%
Низкий
около 1 года назад
redhat логотип
CVE-2024-4068

The NPM package `braces`, versions prior to 3.0.3, fails to limit the number of characters it can handle, which could lead to Memory Exhaustion. In `lib/parse.js,` if a malicious user sends "imbalanced braces" as input, the parsing will enter a loop, which will cause the program to start allocating heap memory without freeing it at any moment of the loop. Eventually, the JavaScript heap limit is reached, and the program will crash.

CVSS3: 7.5
0%
Низкий
больше 1 года назад
nvd логотип
CVE-2024-4068

The NPM package `braces`, versions prior to 3.0.3, fails to limit the number of characters it can handle, which could lead to Memory Exhaustion. In `lib/parse.js,` if a malicious user sends "imbalanced braces" as input, the parsing will enter a loop, which will cause the program to start allocating heap memory without freeing it at any moment of the loop. Eventually, the JavaScript heap limit is reached, and the program will crash.

CVSS3: 7.5
0%
Низкий
около 1 года назад
msrc логотип
CVSS3: 7.5
0%
Низкий
около 1 года назад
debian логотип
CVE-2024-4068

The NPM package `braces`, versions prior to 3.0.3, fails to limit the ...

CVSS3: 7.5
0%
Низкий
около 1 года назад
github логотип
GHSA-grv7-fg5c-xmjg

Uncontrolled resource consumption in braces

CVSS3: 7.5
0%
Низкий
около 1 года назад
fstec логотип
BDU:2024-09427

Уязвимость библиотеки braces, связанная с неконтролируемым потреблением ресурсов, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 7.5
0%
Низкий
больше 1 года назад
suse-cvrf логотип
SUSE-SU-2025:1326-1

Security update for pgadmin4

2 месяца назад
redos логотип
ROS-20241029-08

Множественные уязвимости opensearch

CVSS3: 7.5
8 месяцев назад
suse-cvrf логотип
SUSE-SU-2024:3771-1

Security update for pgadmin4

8 месяцев назад

Уязвимостей на страницу