Skip to content
OpenAdvisories
High CVE-2015-9239 EUVD-2020-0958GHSA-c2v2-7rcg-2ch7

Regular Expression Denial of Service in ansi2html

Published May 31, 2018 · Updated Sep 16, 2024 · Assigned by hackerone

Vendor: HackerOne Product: ansi2html node module Package: ansi2html Ecosystem: npm

Description

ansi2html is vulnerable to regular expression denial of service (ReDoS) when certain types of user input is passed in.

Affected products

VendorProductAffectedFixed
HackerOne ansi2html node module All versions —

Affected packages

EcosystemPackageAffectedFixedRecord
npm ansi2html >= 0.0.0 — GHSA-c2v2-7rcg-2ch7

References