CVE-2023-22467P3HIGHCVSS 7.5≥ 1.0.0, < 1.28.1·≥ 2.0.0, < 2.5.2+1 more2023-01-04
CVE-2023-22467 [HIGH] CVE-2023-22467: Luxon is a library for working with dates and times in JavaScript. On the 1.x branch prior to 1.38.1
Luxon is a library for working with dates and times in JavaScript. On the 1.x branch prior to 1.38.1, the 2.x branch prior to 2.5.2, and the 3.x branch on 3.2.1, Luxon's `DateTime.fromRFC2822() has quadratic (N^2) complexity on some specific inputs. This causes a noticeable slowdown for inputs with lengths above 10k characters. Users providing untrusted data
nvd