Debian/node-got: high 7.5
The normalize-url package before 4.5.1, 5.x before 5.3.1, and 6.x before 6.0.1 for Node.js has a ReDoS (regular expression denial of service) issue because it has exponential performance for data: URL
Action: Upgrade node-got to 11.8.1+~cs53.13.17-3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 11.8.1+~cs53.13.17-3 | - |
Fixed versions
| 11.8.1+~cs53.13.17-3 |
Sources
- osv: DEBIAN-CVE-2021-33502#Debian:14/node-got
- https://security-tracker.debian.org/tracker/CVE-2021-33502
published · modified · JSON