Skip to content
OpenAdvisories

Package · npm

millisecond

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium —
    GHSA-m489-xr35-fjxr

    Regular Expression Denial of Service in millisecond

    Versions of `millisecond` prior to 0.1.2 are affected by a regular expression denial of service vulnerability when extremely long version strings are parsed. ## Proof of concept ``` var ms = require('millisecond'); var genstr = function (len, chr) { var resul…

    millisecond npm