Skip to content
OpenAdvisories

Product · danocmx

node-tf2-item-format

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2024-41655

    TF2 Item Format Regular Expression Denial of Service vulnerability

    TF2 Item Format helps users format TF2 items to the community standards. Versions of `tf2-item-format` since at least `4.2.6` and prior to `5.9.14` are vulnerable to a Regular Expression Denial of Service (ReDoS) attack when parsing crafted user input. This v…

    danocmx node-tf2-item-format tf2-item-format npm