CVE-2021-43309
1 advisory.
npm/uri-template-lite CVE-2021-43309: medium 5.9, EPSS 0.99%
uri-template-lite Regular Expression Denial of Service
Action: Upgrade uri-template-lite to 22.9.0 or later.
npm i uri-template-lite@22.9.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 22.9.0 | - |
Fixed versions
| 22.9.0 |
Sources
- osv: GHSA-chw2-6c7r-37p7
- https://nvd.nist.gov/vuln/detail/CVE-2021-43309
- https://github.com/litejs/uri-template-lite/commit/cbeec2b2a275d819fb534137a155df14729706f8
- https://github.com/litejs/uri-template-lite
- https://github.com/litejs/uri-template-lite/commits/v22.9.0
- https://research.jfrog.com/vulnerabilities/uri-template-lite-redos-xray-211351
CVE-2021-43309 · published · modified · JSON