Lucene search
AnonymousNODEJS:1773HistoryAug 10, 2021 - 3:59 p.m.
Regular Expression Denial of Service in path-parse
2021-08-1015:59:47
Anonymous
www.npmjs.com
133
0.003 Low
EPSS
Percentile
68.7%
Overview
Affected versions of path-parse are vulnerable to Regular Expression Denial of Service (ReDoS) via splitDeviceRe, splitTailRe, and splitPathRe regular expressions. ReDoS exhibits polynomial worst-case time complexity.
Recommendation
Upgrade to version 1.0.7 or later
References
| CPE | Name | Operator | Version |
|---|---|---|---|
| path-parse | lt | 1.0.7 |
Related
veracode
veracode
Regular Expression Denial Of Service (ReDoS)
2021-05-05 05:46:25
nvd
nvd
CVE-2021-23343
2021-05-04 09:15:07
redhatcve
redhatcve
CVE-2021-23343
2021-05-04 14:31:14
github
github
Regular Expression Denial of Service in path-parse
2021-08-10 15:33:47
cve
cve
CVE-2021-23343
2021-05-04 09:15:07
cvelist
cvelist
CVE-2021-23343 Regular Expression Denial of Service (ReDoS)
2021-05-04 00:00:00
osv
osv
Regular Expression Denial of Service in path-parse
2021-08-10 15:33:47
CVE-2021-23343
2021-05-04 09:15:07
Important: nodejs:14 security and bug fix update
2021-09-27 06:47:35
nessus
nessus
RHEL 8 : nodejs-path-parse (Unpatched Vulnerability)
2024-05-11 00:00:00
RHEL 8 : RHV Manager (ovirt-engine) security update [ovirt-4.4.7] (Moderate) (RHSA-2021:2865)
2021-07-22 00:00:00
openSUSE 15 Security Update : nodejs14 (openSUSE-SU-2022:0715-1)
2022-03-05 00:00:00
prion
prion
Code injection
2021-05-04 09:15:00
ibm
ibm
redhat
redhat
(RHSA-2021:2865) Moderate: RHV Manager (ovirt-engine) security update [ovirt-4.4.7]
2021-07-22 14:06:26
(RHSA-2021:3623) Important: nodejs:12 security and bug fix update
2021-09-21 12:33:58
(RHSA-2021:3666) Important: nodejs:14 security and bug fix update
2021-09-27 06:47:35
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2022:0569-1)
2022-02-25 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:0563-1)
2022-02-25 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:0715-1)
2022-03-05 00:00:00
suse
suse
Security update for nodejs12 (important)
2022-03-02 00:00:00
Security update for nodejs8 (important)
2022-03-04 00:00:00
Security update for nodejs14 (important)
2022-03-04 00:00:00
oraclelinux
oraclelinux
nodejs:14 security and bug fix update
2021-09-27 00:00:00
nodejs:12 security and bug fix update
2021-09-22 00:00:00
rocky
rocky
nodejs:14 security and bug fix update
2021-09-27 06:47:35
nodejs:12 security and bug fix update
2021-09-21 12:33:58
almalinux
almalinux
Important: nodejs:14 security and bug fix update
2021-09-27 06:47:35
Important: nodejs:12 security and bug fix update
2021-09-21 12:33:58