High severity7.5NVD Advisory· Published Jan 23, 2017· Updated Jun 17, 2026
CVE-2015-8315
CVE-2015-8315
Description
The ms package before 0.7.1 for Node.js allows attackers to cause a denial of service (CPU consumption) via a long version string, aka a "regular expression denial of service (ReDoS)."
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
msnpm | < 0.7.1 | 0.7.1 |
Affected products
2Patches
Vulnerability mechanics
References
8- nodesecurity.io/advisories/46nvdBroken LinkExploitMitigationVendor AdvisoryWEB
- www.openwall.com/lists/oss-security/2016/04/20/11nvdMailing ListThird Party AdvisoryWEB
- www.securityfocus.com/bid/96389nvdBroken LinkThird Party AdvisoryVDB EntryWEB
- github.com/advisories/GHSA-3fx5-fwvr-xrjgghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2015-8315ghsaADVISORY
- support.f5.com/csp/article/K46337613nvdThird Party AdvisoryWEB
- support.f5.com/csp/article/K46337613ghsaWEB
- web.archive.org/web/20200227190911/http://www.securityfocus.com/bid/96389ghsaWEB
News mentions
0No linked articles in our index yet.