CVE-2021-28092
1 advisory.
npm/is-svg CVE-2021-28092: high 7.5
Regular Expression Denial of Service (ReDoS)
Action: Upgrade is-svg to 4.2.2 or later.
npm i is-svg@4.2.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.1.0 | 4.2.2 | - |
Fixed versions
| 4.2.2 |
Sources
- osv: GHSA-7r28-3m3f-r2pr
- https://nvd.nist.gov/vuln/detail/CVE-2021-28092
- https://github.com/sindresorhus/is-svg/commit/01f8a087fab8a69c3ac9085fbb16035907ab6a5b
- https://github.com/sindresorhus/is-svg/releases
- https://github.com/sindresorhus/is-svg/releases/tag/v4.2.2
- https://security.netapp.com/advisory/ntap-20210513-0008
- https://www.npmjs.com/package/is-svg
CVE-2021-28092 · published · modified · JSON