Npmjs Hosted-Git-Info vulnerabilities

1 known vulnerability affecting npmjs/hosted-git-info.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2021-23362MEDIUMCVSS 5.3≥ 2.0.0, < 2.8.9≥ 3.0.0, < 3.0.8+1 more2021-03-23

CVE-2021-23362 [MEDIUM] CWE-1333 CVE-2021-23362: The package hosted-git-info before 3.0.8 are vulnerable to Regular Expression Denial of Service (ReD The package hosted-git-info before 3.0.8 are vulnerable to Regular Expression Denial of Service (ReDoS) via regular expression shortcutMatch in the fromUrl function in index.js. The affected regular expression exhibits polynomial worst-case time complexity.

cvelistv5ghsanvdosv