All versions of package path-parse are vulnerable to Regular Expression Denial of Service (ReDoS) via splitDeviceRe, splitTailRe, and splitPathRe regular expressions. ReDoS exhibits polynomial worst-case time complexity.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: snyk
Published: 2021-05-04T08:25:17.431572Z
Updated: 2024-09-16T22:14:48.595Z
Reserved: 2021-01-08T00:00:00
Link: CVE-2021-23343
Vulnrichment
No data.
NVD
Status : Modified
Published: 2021-05-04T09:15:07.703
Modified: 2023-11-07T03:30:52.217
Link: CVE-2021-23343
Redhat