Msrc Cbl2 Nodejs18 18.20.3-2 On Cbl Mariner 2.0 vulnerabilities

1 known vulnerability affecting msrc/cbl2_nodejs18_18.20.3-2_on_cbl_mariner_2.0.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2024-21538HIGHCVSS 7.52024-11-12

CVE-2024-21538 [HIGH] CWE-1333 Versions of the package cross-spawn before 7.0.5 are vulnerable to Regular Expression Denial of Service (ReDoS) due to improper input sanitization. Versions of the package cross-spawn before 7.0.5 are vulnerable to Regular Expression Denial of Service (ReDoS) due to improper input sanitization. FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits