Msrc Azl3 Nodejs 20.14.0-3 On Azure Linux 3.0 vulnerabilities

1 known vulnerability affecting msrc/azl3_nodejs_20.14.0-3_on_azure_linux_3.0.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2024-21538HIGHCVSS 7.52024-11-12

CVE-2024-21538 [HIGH] CWE-1333 Versions of the package cross-spawn before 7.0.5 are vulnerable to Regular Expression Denial of Service (ReDoS) due to improper input sanitization. Versions of the package cross-spawn before 7.0.5 are vulnerable to Regular Expression Denial of Service (ReDoS) due to improper input sanitization. FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits