Skip to content
OpenAdvisories
High · 7.5 CVE-2021-23371 EUVD-2021-1106GHSA-hpmr-g4pq-jhgpSNYK-JS-CHRONONODE-1083228

Regular Expression Denial of Service (ReDoS)

Published Apr 12, 2021 · Updated Sep 16, 2024 · Assigned by snyk

Package: chrono-node Ecosystem: npm

Description

This affects the package chrono-node before 2.2.4. It hangs on a date-like string with lots of embedded spaces.

Affected products

VendorProductAffectedFixed
— chrono-node unspecified – < 2.2.4 2.2.4

Affected packages

EcosystemPackageAffectedFixedRecord
npm chrono-node < 2.2.4 2.2.4 GHSA-hpmr-g4pq-jhgp

References