CVE-2021-23392

Published June 8th, 2021

View on NVD ↗

CVSS v3

5.3

MEDIUM

CVSS v2

5

MEDIUM

Affected

1

PROJECT

Description

The package locutus before 2.0.15 are vulnerable to Regular Expression Denial of Service (ReDoS) via the gopher_parsedir function.

locutusjs/locutus

Bringing stdlibs of other programming languages to TypeScript for fun

GitHub

3.77K