Skip to content
OpenAdvisories

Archive

4 March 2018

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • High 7.5

    Regular Expression Denial of Service in moment

    The moment module before 2.19.3 for Node.js is prone to a regular expression denial of service via a crafted date string, a different vulnerability than CVE-2016-4055.

  • High 7.5

    AWS Lambda parser is vulnerable to Regular Expression Denial of Service

    index.js in the Anton Myshenin aws-lambda-multipart-parser NPM package before 0.1.2 has a Regular Expression Denial of Service (ReDoS) issue via a crafted multipart/form-data boundary string.