Lucene search
GoogleOSV:CVE-2021-23382HistoryApr 26, 2021 - 4:15 p.m.
CVE-2021-23382
2021-04-2616:15:07
Google
osv.dev
7
The package postcss before 8.2.13 are vulnerable to Regular Expression Denial of Service (ReDoS) via getAnnotationURL() and loadAnnotation() in lib/previous-map.js. The vulnerable regexes are caused mainly by the sub-pattern /*\s* sourceMappingURL=(.*).
Related
cve
cve
CVE-2021-23382
2021-04-26 16:15:07
cvelist
cvelist
CVE-2021-23382 Regular Expression Denial of Service (ReDoS)
2021-04-26 00:00:00
redhatcve
redhatcve
CVE-2021-23382
2021-04-27 17:16:11
ubuntucve
ubuntucve
CVE-2021-23382
2021-04-26 00:00:00
prion
prion
Code injection
2021-04-26 16:15:00
github
github
Regular Expression Denial of Service in postcss
2022-01-07 00:21:36
veracode
veracode
Regular Expression Denial Of Service (ReDoS)
2021-04-27 04:38:01
osv
osv
Regular Expression Denial of Service in postcss
2022-01-07 00:21:36
nvd
nvd
CVE-2021-23382
2021-04-26 16:15:07
debiancve
debiancve
CVE-2021-23382
2021-04-26 16:15:07
ibm
ibm
redhat
redhat
nessus
nessus
Splunk Enterprise < 8.1.14, 8.2.0 < 8.2.11, 9.0.0 < 9.0.5 (SVD-2023-0613)
2024-05-02 00:00:00