8 results · Feed
-
High 8.6CVE-2023-43646 Public exploit
Inefficient Regular Expression Complexity in get-func-name
get-func-name is a module to retrieve a function's name securely and consistently both in NodeJS and the browser. Versions prior to 2.0.1 are subject to a regular expression denial of service (redos) vulnerability which may lead to a denial of service when pa…
-
Unscored —
AOMedia v3.0.0 to v3.5.0 was discovered to contain an invalid read memory access via the component assign_frame_buffer_…
-
Medium 4.3
vercel ms index.js parse redos
A vulnerability, which was classified as problematic, has been found in vercel ms up to 1.x. This issue affects the function parse of the file index.js. The manipulation of the argument str leads to inefficient regular expression complexity. The attack may be…
-
Medium 5.5
NASM v2.16 was discovered to contain a segmentation violation in the component ieee_write_file at /output/outieee.c.
-
High 7.8
NASM v2.16 was discovered to contain a global buffer overflow in the component dbgdbg_typevalue at /output/outdbg.c.
-
Medium 6.3
hughsk flat index.js unflatten prototype pollution
A vulnerability, which was classified as critical, was found in hughsk flat up to 5.0.0. This affects the function unflatten of the file index.js. The manipulation leads to improperly controlled modification of object prototype attributes ('prototype pollutio…
-
Medium 5.3
Regular Expression Denial of Service (ReDoS)
The package terser before 4.8.1, from 5.0.0 and before 5.14.2 are vulnerable to Regular Expression Denial of Service (ReDoS) due to insecure usage of regular expressions.
-
Unscored —
In tinyexr 1.0.1, there is a heap-based buffer over-read in tinyexr::DecodePixelData.