npm/chrono-node CVE-2021-23371: high 7.5, EPSS 1.99%

Denial of service in chrono-node

Action: Upgrade chrono-node to 2.2.4 or later.

npm i chrono-node@2.2.4

Affected

Fixed versions

Sources

• osv: GHSA-hpmr-g4pq-jhgp
• https://nvd.nist.gov/vuln/detail/CVE-2021-23371
• https://github.com/wanasit/chrono/issues/382
• https://github.com/wanasit/chrono/commit/98815b57622443b5c498a427210ebd603d705f4c
• https://snyk.io/vuln/SNYK-JS-CHRONONODE-1083228

CVE-2021-23371 · published 2021-05-06T15:58:05Z · modified 2026-07-08T06:49:30.506047481Z · JSON