npm/knwl.js CVE-2020-26306: medium, EPSS 0.45%

Knwl.js Regular Expression Denial of Service vulnerability

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GHSA-68qg-g787-3rp5
• https://nvd.nist.gov/vuln/detail/CVE-2020-26306
• https://github.com/benhmoore/Knwl/issues/106
• https://github.com/benhmoore/Knwl/commit/88aa966b1415a167c7c91b70053b72c7762c1cc0
• https://github.com/benhmoore/Knwl
• https://securitylab.github.com/advisories/GHSL-2020-296-redos-Knwl.js

CVE-2020-26306 · published 2024-10-26T21:30:46Z · modified 2024-10-28T14:57:09.885595Z · JSON