RSS   Podatności dla 'Is-svg'   RSS

2021-06-21
 
CVE-2021-29059

CWE-770
 

 
A vulnerability was discovered in IS-SVG version 4.3.1 and below where a Regular Expression Denial of Service (ReDOS) occurs if the application is provided and checks a crafted invalid SVG string.

 
2021-03-12
 
CVE-2021-28092

NVD-CWE-Other
 

 
The is-svg package 2.1.0 through 4.2.1 for Node.js uses a regular expression that is vulnerable to Regular Expression Denial of Service (ReDoS). If an attacker provides a malicious string, is-svg will get stuck processing the input for a very long time.

 


Copyright 2024, cxsecurity.com

 

Back to Top