Uncontrolled Resource Consumption in ansi-html

Description

This affects all versions of package ansi-html. If an attacker provides a malicious string, it will get stuck processing the input for an extremely long time.

Recommendation

Update the ansi-html package to the latest compatible version. Followings are version details:

• Affected version(s): < 0.0.8
• Patched version(s): 0.0.8

References

• GHSA-whgm-jr23-g3j9
• snyk.io
• CVE-2021-23424
• CWE-400
• CAPEC-310
• OWASP 2021-A6

Related Issues

• Uncontrolled Resource Consumption in trim-off-newlines - CVE-2021-23425
• Uncontrolled Resource Consumption in transpile - CVE-2021-23429
• Uncontrolled Resource Consumption in trim-newlines - CVE-2021-33623
• Cattown is Vulnerable to Uncontrolled Resource Consumption through Inefficient Regular Expression Complexity - CVE-2025-58451

You might also like:

How to Secure your NodeJs Express Javascript Application - part 1

How to Secure your NodeJs Express Javascript Application - part 2

10 Secure Coding Best Practices to Follow in Every Project

Tags:

npm

ansi-html