Lucene search
AnonymousNODEJS:1747HistoryMay 24, 2021 - 7:56 p.m.
Regular Expression Denial of Service
2021-05-2419:56:39
Anonymous
www.npmjs.com
43
browserslist
regular expression denial of service
vulnerability
parsing
upgrade
EPSS
0.002
Percentile
57.5%
Overview
The package browserslist from 4.0.0 and before 4.16.5 are vulnerable to Regular Expression Denial of Service (ReDoS) during parsing of queries.
Recommendation
Upgrade to version 4.16.5 or later
References
Related
redhatcve
redhatcve
CVE-2021-23364
2021-04-30 17:49:22
cve
cve
CVE-2021-23364
2021-04-28 16:15:08
ibm
ibm
Security Bulletin: Open Source Dependency Vulnerability
2023-05-15 18:11:50
veracode
veracode
Regular Expression Denial Of Service (ReDoS)
2021-04-23 01:46:56
debiancve
debiancve
CVE-2021-23364
2021-04-28 16:15:08
ubuntucve
ubuntucve
CVE-2021-23364
2021-04-28 00:00:00
osv
osv
CVE-2021-23364
2021-04-28 16:15:08
Regular Expression Denial of Service in browserslist
2021-05-24 19:52:40
github
github
Regular Expression Denial of Service in browserslist
2021-05-24 19:52:40
prion
prion
Design/Logic Flaw
2021-04-28 16:15:00
nvd
nvd
CVE-2021-23364
2021-04-28 16:15:08
cvelist
cvelist
CVE-2021-23364 Regular Expression Denial of Service (ReDoS)
2021-04-28 15:35:19
redhat
redhat