CVE-2021-23354
1 advisory.
npm/printf CVE-2021-23354: high 7.5, EPSS 2.18%
printf vulnerable to Regular Expression Denial of Service (ReDoS)
Action: Upgrade printf to 0.6.1 or later.
npm i printf@0.6.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.6.1 | - |
Fixed versions
| 0.6.1 |
Sources
- osv: GHSA-xfhp-gmh8-r8v2
- https://nvd.nist.gov/vuln/detail/CVE-2021-23354
- https://github.com/adaltas/node-printf/issues/31
- https://github.com/adaltas/node-printf/pull/32
- https://github.com/adaltas/node-printf/commit/a8502e7c9b0b22555696a2d8ef67722086413a68
- https://snyk.io/vuln/SNYK-JS-PRINTF-1072096
CVE-2021-23354 · published · modified · JSON