Логотип exploitDog
bind:CVE-2024-45296
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2024-45296

Количество 6

Количество 6

ubuntu логотип

CVE-2024-45296

больше 1 года назад

path-to-regexp turns path strings into a regular expressions. In certain cases, path-to-regexp will output a regular expression that can be exploited to cause poor performance. Because JavaScript is single threaded and regex matching runs on the main thread, poor performance will block the event loop and lead to a DoS. The bad regular expression is generated any time you have two parameters within a single segment, separated by something that is not a period (.). For users of 0.1, upgrade to 0.1.10. All other users should upgrade to 8.0.0.

CVSS3: 7.5
EPSS: Низкий
redhat логотип

CVE-2024-45296

больше 1 года назад

path-to-regexp turns path strings into a regular expressions. In certain cases, path-to-regexp will output a regular expression that can be exploited to cause poor performance. Because JavaScript is single threaded and regex matching runs on the main thread, poor performance will block the event loop and lead to a DoS. The bad regular expression is generated any time you have two parameters within a single segment, separated by something that is not a period (.). For users of 0.1, upgrade to 0.1.10. All other users should upgrade to 8.0.0.

CVSS3: 5.3
EPSS: Низкий
nvd логотип

CVE-2024-45296

больше 1 года назад

path-to-regexp turns path strings into a regular expressions. In certain cases, path-to-regexp will output a regular expression that can be exploited to cause poor performance. Because JavaScript is single threaded and regex matching runs on the main thread, poor performance will block the event loop and lead to a DoS. The bad regular expression is generated any time you have two parameters within a single segment, separated by something that is not a period (.). For users of 0.1, upgrade to 0.1.10. All other users should upgrade to 8.0.0.

CVSS3: 7.5
EPSS: Низкий
msrc логотип

CVE-2024-45296

около 1 года назад

path-to-regexp outputs backtracking regular expressions

CVSS3: 7.5
EPSS: Низкий
debian логотип

CVE-2024-45296

больше 1 года назад

path-to-regexp turns path strings into a regular expressions. In certa ...

CVSS3: 7.5
EPSS: Низкий
github логотип

GHSA-9wv6-86v2-598j

больше 1 года назад

path-to-regexp outputs backtracking regular expressions

CVSS3: 7.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2024-45296

path-to-regexp turns path strings into a regular expressions. In certain cases, path-to-regexp will output a regular expression that can be exploited to cause poor performance. Because JavaScript is single threaded and regex matching runs on the main thread, poor performance will block the event loop and lead to a DoS. The bad regular expression is generated any time you have two parameters within a single segment, separated by something that is not a period (.). For users of 0.1, upgrade to 0.1.10. All other users should upgrade to 8.0.0.

CVSS3: 7.5
0%
Низкий
больше 1 года назад
redhat логотип
CVE-2024-45296

path-to-regexp turns path strings into a regular expressions. In certain cases, path-to-regexp will output a regular expression that can be exploited to cause poor performance. Because JavaScript is single threaded and regex matching runs on the main thread, poor performance will block the event loop and lead to a DoS. The bad regular expression is generated any time you have two parameters within a single segment, separated by something that is not a period (.). For users of 0.1, upgrade to 0.1.10. All other users should upgrade to 8.0.0.

CVSS3: 5.3
0%
Низкий
больше 1 года назад
nvd логотип
CVE-2024-45296

path-to-regexp turns path strings into a regular expressions. In certain cases, path-to-regexp will output a regular expression that can be exploited to cause poor performance. Because JavaScript is single threaded and regex matching runs on the main thread, poor performance will block the event loop and lead to a DoS. The bad regular expression is generated any time you have two parameters within a single segment, separated by something that is not a period (.). For users of 0.1, upgrade to 0.1.10. All other users should upgrade to 8.0.0.

CVSS3: 7.5
0%
Низкий
больше 1 года назад
msrc логотип
CVE-2024-45296

path-to-regexp outputs backtracking regular expressions

CVSS3: 7.5
0%
Низкий
около 1 года назад
debian логотип
CVE-2024-45296

path-to-regexp turns path strings into a regular expressions. In certa ...

CVSS3: 7.5
0%
Низкий
больше 1 года назад
github логотип
GHSA-9wv6-86v2-598j

path-to-regexp outputs backtracking regular expressions

CVSS3: 7.5
0%
Низкий
больше 1 года назад

Уязвимостей на страницу