Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:29967
HistoryApr 13, 2021 - 2:43 a.m.

Denial Of Service (DoS)

2021-04-1302:43:47
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
chrono-node
denial of service
vulnerability
regex matching
parsetimeunits
embedded spaces

EPSS

0.002

Percentile

59.2%

chrono-node is vulnerable to denial of service (DoS). The vulnerability exists due to catastrophic backtracking in the regex matching, due to embedded spaces in the parseTimeUnits function.

EPSS

0.002

Percentile

59.2%