This repository has been archived by the owner on May 6, 2021. It is now read-only.
CVE-2021-23343 (Medium) detected in path-parse-1.0.6.tgz #349
Labels
security vulnerability
Security vulnerability detected by WhiteSource
CVE-2021-23343 - Medium Severity Vulnerability
Vulnerable Library - path-parse-1.0.6.tgz
Node.js path.parse() ponyfill
Library home page: https://registry.npmjs.org/path-parse/-/path-parse-1.0.6.tgz
Path to dependency file: angular2-book-list/package.json
Path to vulnerable library: angular2-book-list/node_modules/path-parse/package.json
Dependency Hierarchy:
Found in HEAD commit: 4ed9dcfcd5231088c192758d452f2665917bf52e
Found in base branch: master
Vulnerability Details
All versions of package path-parse are vulnerable to Regular Expression Denial of Service (ReDoS) via splitDeviceRe, splitTailRe, and splitPathRe regular expressions. ReDoS exhibits polynomial worst-case time complexity.
Publish Date: 2021-05-04
URL: CVE-2021-23343
CVSS 3 Score Details (5.3)
Base Score Metrics:
Step up your Open Source Security Game with WhiteSource here
The text was updated successfully, but these errors were encountered: