← All advisories

High severity7.5OSV Advisory· Published Apr 12, 2021· Updated Jun 17, 2026

CVE-2021-23371

CVE-2021-23371

Description

This affects the package chrono-node before 2.2.4. It hangs on a date-like string with lots of embedded spaces.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
chrono-nodenpm	< 2.2.4	2.2.4

Affected products

3

Wanasit/ChronoOSV
Range: v0.1.10, v0.1.11, v0.1.8, …
Chrono Node Project/Chrono Node
cpe:2.3:a:chrono-node_project:chrono-node:*:*:*:*:*:node.js:*:*
Range: <2.2.4
ghsa-coords
pkg:npm/chrono-node
Range: < 2.2.4

Patches

Vulnerability mechanics

References

5

github.com/wanasit/chrono/commit/98815b57622443b5c498a427210ebd603d705f4cnvdPatchThird Party AdvisoryWEB
github.com/wanasit/chrono/issues/382nvdExploitPatchThird Party AdvisoryWEB
snyk.io/vuln/SNYK-JS-CHRONONODE-1083228nvdExploitThird Party AdvisoryWEB
github.com/advisories/GHSA-hpmr-g4pq-jhgpghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2021-23371ghsaADVISORY

News mentions

0

No linked articles in our index yet.