CVE-2020-26289
1 advisory.
npm/date-and-time CVE-2020-26289: high 7.5
regular expression denial of service (ReDoS)
Action: Upgrade date-and-time to 0.14.2 or later.
npm i date-and-time@0.14.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.14.2 | - |
Fixed versions
| 0.14.2 |
Sources
- osv: GHSA-r92x-f52r-x54g
- https://github.com/knowledgecode/date-and-time/security/advisories/GHSA-r92x-f52r-x54g
- https://nvd.nist.gov/vuln/detail/CVE-2020-26289
- https://github.com/knowledgecode/date-and-time/commit/9e4b501eacddccc8b1f559fb414f48472ee17c2a
- https://www.npmjs.com/advisories/1592
- https://www.npmjs.com/package/date-and-time
CVE-2020-26289 · published · modified · JSON