indexzero/TimeSpan.js
GitHub
Releases4
Frequency9 months 2 weeks
Last Release
Stars26
A JavaScript TimeSpan library for node.js (and soon the browser)
CVE History
| CVE | Published | CVSS v3 | CVSS v2 |
|---|---|---|---|
| 7.5 HIGH | 5 MEDIUM | ||
The timespan module is vulnerable to regular expression denial of service. Given 50k characters of untrusted user input it will block the event loop for around 10 seconds. | |||