Description
NCalc is a fast, lightweight expression evaluator for .NET. Prior to 6.1.1, the factorial operator implementation in src/NCalc.Core/Helpers/MathHelper.cs permits specially crafted expressions with extremely large factorial operands, causing excessive CPU consumption or a non-terminating loop due to integer overflow in the factorial calculation logic when applications evaluate untrusted expressions. This issue is fixed in version 6.1.1.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ncalc | ncalc | < 6.1.1 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| NuGet | NCalc.Core | < 6.1.1 | 6.1.1 | GHSA-3w5p-95mh-gq75 |
| NuGet | NCalcSync | < 6.1.1 | 6.1.1 | GHSA-3w5p-95mh-gq75 |