Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Количество 6

Количество 6

ubuntu логотип

CVE-2024-45296

почти 2 года назад

path-to-regexp turns path strings into a regular expressions. In certain cases, path-to-regexp will output a regular expression that can be exploited to cause poor performance. Because JavaScript is single threaded and regex matching runs on the main thread, poor performance will block the event loop and lead to a DoS. The bad regular expression is generated any time you have two parameters within a single segment, separated by something that is not a period (.). For users of 0.1, upgrade to 0.1.10. All other users should upgrade to 8.0.0.

CVSS3: 7.5
EPSS: Низкий
redhat логотип

CVE-2024-45296

почти 2 года назад

path-to-regexp turns path strings into a regular expressions. In certain cases, path-to-regexp will output a regular expression that can be exploited to cause poor performance. Because JavaScript is single threaded and regex matching runs on the main thread, poor performance will block the event loop and lead to a DoS. The bad regular expression is generated any time you have two parameters within a single segment, separated by something that is not a period (.). For users of 0.1, upgrade to 0.1.10. All other users should upgrade to 8.0.0.

CVSS3: 5.3
EPSS: Низкий
nvd логотип

CVE-2024-45296

почти 2 года назад

path-to-regexp turns path strings into a regular expressions. In certain cases, path-to-regexp will output a regular expression that can be exploited to cause poor performance. Because JavaScript is single threaded and regex matching runs on the main thread, poor performance will block the event loop and lead to a DoS. The bad regular expression is generated any time you have two parameters within a single segment, separated by something that is not a period (.). For users of 0.1, upgrade to 0.1.10. All other users should upgrade to 8.0.0.

CVSS3: 7.5
EPSS: Низкий
msrc логотип

CVE-2024-45296

почти 2 года назад

path-to-regexp outputs backtracking regular expressions

CVSS3: 7.5
EPSS: Низкий
debian логотип

CVE-2024-45296

почти 2 года назад

path-to-regexp turns path strings into a regular expressions. In certa ...

CVSS3: 7.5
EPSS: Низкий
github логотип

GHSA-9wv6-86v2-598j

почти 2 года назад

path-to-regexp outputs backtracking regular expressions

CVSS3: 7.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2024-45296

path-to-regexp turns path strings into a regular expressions. In certain cases, path-to-regexp will output a regular expression that can be exploited to cause poor performance. Because JavaScript is single threaded and regex matching runs on the main thread, poor performance will block the event loop and lead to a DoS. The bad regular expression is generated any time you have two parameters within a single segment, separated by something that is not a period (.). For users of 0.1, upgrade to 0.1.10. All other users should upgrade to 8.0.0.

CVSS3: 7.5
1%
Низкий
почти 2 года назад
redhat логотип
CVE-2024-45296

path-to-regexp turns path strings into a regular expressions. In certain cases, path-to-regexp will output a regular expression that can be exploited to cause poor performance. Because JavaScript is single threaded and regex matching runs on the main thread, poor performance will block the event loop and lead to a DoS. The bad regular expression is generated any time you have two parameters within a single segment, separated by something that is not a period (.). For users of 0.1, upgrade to 0.1.10. All other users should upgrade to 8.0.0.

CVSS3: 5.3
1%
Низкий
почти 2 года назад
nvd логотип
CVE-2024-45296

path-to-regexp turns path strings into a regular expressions. In certain cases, path-to-regexp will output a regular expression that can be exploited to cause poor performance. Because JavaScript is single threaded and regex matching runs on the main thread, poor performance will block the event loop and lead to a DoS. The bad regular expression is generated any time you have two parameters within a single segment, separated by something that is not a period (.). For users of 0.1, upgrade to 0.1.10. All other users should upgrade to 8.0.0.

CVSS3: 7.5
1%
Низкий
почти 2 года назад
msrc логотип
CVE-2024-45296

path-to-regexp outputs backtracking regular expressions

CVSS3: 7.5
1%
Низкий
почти 2 года назад
debian логотип
CVE-2024-45296

path-to-regexp turns path strings into a regular expressions. In certa ...

CVSS3: 7.5
1%
Низкий
почти 2 года назад
github логотип
GHSA-9wv6-86v2-598j

path-to-regexp outputs backtracking regular expressions

CVSS3: 7.5
1%
Низкий
почти 2 года назад

Уязвимостей на страницу