Skip to content
OpenAdvisories
Medium · 5.3 CVE-2021-23392 EUVD-2021-1253GHSA-39q4-p535-c852SNYK-JS-LOCUTUS-1090597

Regular Expression Denial of Service (ReDoS)

Published Jun 8, 2021 · Updated Sep 16, 2024 · Assigned by snyk

Package: locutus Ecosystem: npm

Description

The package locutus before 2.0.15 are vulnerable to Regular Expression Denial of Service (ReDoS) via the gopher_parsedir function.

Affected products

VendorProductAffectedFixed
— locutus unspecified – < 2.0.15 2.0.15

Affected packages

EcosystemPackageAffectedFixedRecord
npm locutus < 2.0.15 2.0.15 GHSA-39q4-p535-c852

References