Skip to content
OpenAdvisories

Product · HackerOne

timespan node module

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2017-16115

    Regular Expression Denial of Service in timespan

    The timespan module is vulnerable to regular expression denial of service. Given 50k characters of untrusted user input it will block the event loop for around 10 seconds.

    HackerOne timespan node module timespan npm