tocsin

Alpine/nodejs: high 7.5

ssri 5.2.2-8.0.0, fixed in 8.0.1, processes SRIs using a regular expression which is vulnerable to a denial of service. Malicious SRIs could take an extremely long time to process, leading to denial o

Action: Upgrade nodejs to 14.16.1-r1 or later.

Affected

introducedfixedlast affected
014.16.1-r1-

Fixed versions

14.16.1-r1

Sources

published · modified · JSON