Lucene search
GoogleOSV:GHSA-7R28-3M3F-R2PRHistoryMar 19, 2021 - 9:25 p.m.
Regular Expression Denial of Service (ReDoS)
2021-03-1921:25:50
Google
osv.dev
15
node.js
is-svg package
redos
vulnerability
regex pattern
processing delay
EPSS
0.002
Percentile
59.2%
The is-svg package 2.1.0 through 4.2.1 for Node.js uses a regular expression that is vulnerable to Regular Expression Denial of Service (ReDoS). If an attacker provides a malicious string, is-svg will get stuck processing the input.
Related
osv
osv
CVE-2021-28092
2021-03-12 22:15:14
github
github
Regular Expression Denial of Service (ReDoS)
2021-03-19 21:25:50
cvelist
cvelist
CVE-2021-28092
2021-03-12 21:31:35
redhatcve
redhatcve
CVE-2021-28092
2021-03-15 16:32:10
prion
prion
Design/Logic Flaw
2021-03-12 22:15:00
cve
cve
CVE-2021-28092
2021-03-12 22:15:14
nvd
nvd
CVE-2021-28092
2021-03-12 22:15:14
veracode
veracode
Regular Expression Denial Of Service (ReDoS)
2021-03-15 06:24:10
ibm
ibm
redhat
redhat
kitploit
kitploit