Asymmetric denial of service In path-parse
Description
Regular Expression Denial of Service in path-parse
Affected versions of npm package path-parse are vulnerable to Regular Expression Denial of Service (ReDoS) via splitDeviceRe, splitTailRe, and splitPathRe regular expressions. ReDoS exhibits polynomial worst-case time complexity.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 npm | 1.0.7 | ||
 rpm rhel8.1 | 1:12.22.5-1.module+el8.1.0+12238+63fe3aec | ||
rpm rhel8.2 | 1:12.22.5-1.module+el8.2.0+12241+a3db445b | ||
rpm rhel8 | - | - |
Aliases
1. 2. 3. 4.
References
1. 2. 3. 4.