← All advisories

High severityOSV Advisory· Published Apr 12, 2021· Updated Sep 16, 2024

Regular Expression Denial of Service (ReDoS)

CVE-2021-23371

Description

This affects the package chrono-node before 2.2.4. It hangs on a date-like string with lots of embedded spaces.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
chrono-nodenpm	< 2.2.4	2.2.4

Affected products

2

Wanasit/ChronoOSV
Range: v0.1.10, v0.1.11, v0.1.8, …
ghsa-coords
pkg:npm/chrono-node
Range: < 2.2.4

Patches

Vulnerability mechanics

References

5

github.com/advisories/GHSA-hpmr-g4pq-jhgpghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2021-23371ghsaADVISORY
github.com/wanasit/chrono/commit/98815b57622443b5c498a427210ebd603d705f4cghsax_refsource_MISCWEB
github.com/wanasit/chrono/issues/382ghsax_refsource_MISCWEB
snyk.io/vuln/SNYK-JS-CHRONONODE-1083228ghsax_refsource_MISCWEB

News mentions

0

No linked articles in our index yet.