Skip to content
OpenAdvisories

Package · npm

ms

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 4.3
    CVE-2017-20162

    vercel ms index.js parse redos

    A vulnerability, which was classified as problematic, has been found in vercel ms up to 1.x. This issue affects the function parse of the file index.js. The manipulation of the argument str leads to inefficient regular expression complexity. The attack may be…

    vercel ms npm qt6-webengine Ubuntu npm
  • High 7.5
    CVE-2015-8315

    Regular Expression Denial of Service in ms

    The ms package before 0.7.1 for Node.js allows attackers to cause a denial of service (CPU consumption) via a long version string, aka a "regular expression denial of service (ReDoS)."

    ms npm