CVE-2021-3777
nodejs-tmpl is vulnerable to Inefficient Regular Expression Complexity
Résumé
tmpl vulnerable to Inefficient Regular Expression Complexity which may lead to resource exhaustion
Description d'origine
La description telle que publiée par la source (souvent en anglais).
nodejs-tmpl is vulnerable to Inefficient Regular Expression Complexity
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
npm
tmpl
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.0.5"}]}]
Références
- advisory nvd.nist.gov
- package github.com
- patch github.com
- patch huntr.dev