Skip to content
OpenAdvisories

Package · npm

timespan

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.5
    CVE-2017-16115

    Regular Expression Denial of Service in timespan

    The timespan module is vulnerable to regular expression denial of service. Given 50k characters of untrusted user input it will block the event loop for around 10 seconds.

    HackerOne timespan node module timespan npm