lodash prior to 4.17.11 is affected by: CWE-400: Uncontrolled Resource Consumption. The impact is: Denial of service. The component is: Date handler. The attack vector is: Attacker provides very long strings, which the library attempts to match using a regular expression. The fixed version is: 4.17.11.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: dwf

Published: 2019-07-17T20:25:30

Updated: 2024-08-05T03:07:18.476Z

Reserved: 2019-03-20T00:00:00

Link: CVE-2019-1010266

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2019-07-17T21:15:10.873

Modified: 2024-11-21T04:18:06.797

Link: CVE-2019-1010266

cve-icon Redhat

Severity : Low

Publid Date: 2019-04-05T00:00:00Z

Links: CVE-2019-1010266 - Bugzilla