Uncontrolled Resource Consumption in ansi-html

Description

This affects all versions of package ansi-html. If an attacker provides a malicious string, it will get stuck processing the input for an extremely long time.

Recommendation

Update the ansi-html package to the latest compatible version. Followings are version details:

Affected version(s): < 0.0.8
Patched version(s): 0.0.8

References

GHSA-whgm-jr23-g3j9
snyk.io
CVE-2021-23424
CWE-400
CAPEC-310
OWASP 2021-A6

Could your website be exposed too?

SmartScanner can check your website for Uncontrolled Resource Consumption in ansi-html and gives you actionable findings to investigate.

Start a free scan

Related Issues

Uncontrolled Resource Consumption in trim-off-newlines - CVE-2021-23425
Uncontrolled Resource Consumption in transpile - CVE-2021-23429
Uncontrolled Resource Consumption in trim-newlines - CVE-2021-33623
Cattown is Vulnerable to Uncontrolled Resource Consumption through Inefficient Regular Expression Complexity - CVE-2025-58451

How to Secure your NodeJs Express Javascript Application - part 1

How to Secure your NodeJs Express Javascript Application - part 2

10 Secure Coding Best Practices to Follow in Every Project

See something that needs correcting? Let us knowUpdated February 12, 2025