npm/get-func-name CVE-2023-43646: high 7.5, EPSS 1.38%
Chaijs/get-func-name vulnerable to ReDoS
Action: Upgrade get-func-name to 2.0.1 or later.
npm i get-func-name@2.0.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.0.1 | - |
Fixed versions
| 2.0.1 |
Sources
- osv: GHSA-4q6p-r6v2-jvc5
- https://github.com/chaijs/get-func-name/security/advisories/GHSA-4q6p-r6v2-jvc5
- https://nvd.nist.gov/vuln/detail/CVE-2023-43646
- https://github.com/chaijs/get-func-name/commit/f934b228b5e2cb94d6c8576d3aac05493f667c69
- https://github.com/chaijs/get-func-name
- https://github.com/chaijs/get-func-name/blob/78ad756441a83f3dc203e50f76c113ae3ac017dc/index.js#L15
CVE-2023-43646 · published · modified · JSON