Inefficient Regular Expression Complexity in handsontable

Description

The package handsontable from 0 and before 10.0.0 are vulnerable to Regular Expression Denial of Service (ReDoS) in Handsontable.helper.isNumeric function.

Recommendation

Update the handsontable package to the latest compatible version. Followings are version details:

Affected version(s): < 10.0.0
Patched version(s): 10.0.0

References

GHSA-hf66-r44g-p7j9
snyk.io
CVE-2021-23446
CWE-1333
CAPEC-310
OWASP 2021-A6

Could your website be exposed too?

SmartScanner can check your website for Inefficient Regular Expression Complexity in handsontable and gives you actionable findings to investigate.

Start a free scan

Related Issues

string-kit Inefficient Regular Expression Complexity vulnerability - CVE-2021-4299
Inefficient Regular Expression Complexity in chalk/ansi-regex - CVE-2021-3807
axios Inefficient Regular Expression Complexity vulnerability - CVE-2021-3749
Inefficient Regular Expression Complexity in validator.js - CVE-2021-3765

How to Secure your NodeJs Express Javascript Application - part 1

How to Secure your NodeJs Express Javascript Application - part 2

10 Secure Coding Best Practices to Follow in Every Project

See something that needs correcting? Let us knowUpdated September 05, 2023