Lucene search
Veracode Vulnerability DatabaseVERACODE:30671HistoryMay 25, 2021 - 7:10 a.m.
Regular Expression Denial Of Service (ReDoS)
2021-05-2507:10:20
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13
0.001 Low
EPSS
Percentile
43.3%
normalize-url is vulnerable to regular expression denial of service. The usage of an insecure regex allows an attacker to cause a denial of service condition via a malicious URL string.
Related
ibm
ibm
redhatcve
redhatcve
CVE-2021-33502
2021-05-25 14:57:29
debiancve
debiancve
CVE-2021-33502
2021-05-24 16:15:08
osv
osv
ReDoS in normalize-url
2021-06-08 23:11:43
Moderate: nodejs:16 security, bug fix, and enhancement update
2021-12-15 19:09:29
Moderate: nodejs:16 security, bug fix, and enhancement update
2021-12-15 19:09:29
cvelist
cvelist
CVE-2021-33502
2021-05-24 15:42:34
cve
cve
CVE-2021-33502
2021-05-24 16:15:08
ubuntucve
ubuntucve
CVE-2021-33502
2021-05-24 00:00:00
nessus
nessus
RHEL 8 : 12_nodejs-nodemon (Unpatched Vulnerability)
2024-06-03 00:00:00
RHEL 8 : nodejs-normalize-url (Unpatched Vulnerability)
2024-05-11 00:00:00
RHEL 7 : rh-nodejs12-nodejs and rh-nodejs12-nodejs-nodemon (RHSA-2021:2931)
2021-07-28 00:00:00
nodejs
nodejs
Regular Expression Denial of Service
2021-06-08 23:12:07
nvd
nvd
CVE-2021-33502
2021-05-24 16:15:08
github
github
ReDoS in normalize-url
2021-06-08 23:11:43
prion
prion
Denial of service
2021-05-24 16:15:00
redhat
redhat
oraclelinux
oraclelinux
nodejs:16 security, bug fix, and enhancement update
2021-12-16 00:00:00
nodejs:14 security, bug fix, and enhancement update
2022-02-02 00:00:00
nodejs and nodejs-nodemon security and bug fix update
2022-09-22 00:00:00
almalinux
almalinux
Moderate: nodejs:16 security, bug fix, and enhancement update
2021-12-15 19:09:29
Moderate: nodejs:14 security, bug fix, and enhancement update
2022-02-01 20:08:39
Moderate: nodejs and nodejs-nodemon security and bug fix update
2022-09-20 00:00:00
rocky
rocky
nodejs:16 security, bug fix, and enhancement update
2021-12-15 19:09:29
nodejs:14 security, bug fix, and enhancement update
2022-02-01 20:08:39
nodejs and nodejs-nodemon security and bug fix update
2022-09-20 11:37:49