Description
Versions of ms prior to 0.7.1 are affected by a regular expression denial of service vulnerability when extremely long version strings are parsed.
Recommendation
Update the ms package to the latest compatible version. Followings are version details:
- Affected version(s): < 0.7.1
- Patched version(s): 0.7.1
References
Could your website be exposed too?
SmartScanner can check your website for Regular Expression Denial of Service in ms and gives you actionable findings to investigate.
Start a free scanRelated Issues
- Regular Expression Denial of Service in marked - CVE-2015-8854
- Regular Expression Denial of Service in ansi2html - CVE-2015-9239
- Regular expression denial of service in codemirror - CVE-2020-7760
- Regular Expression Denial of Service in dat.gui - CVE-2020-7755
You might also like:
See something that needs correcting? Let us knowUpdated August 01, 2024


