Security Advisory

CVE-2021-23343

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-05-04 08:25:17
Last updated 2024-09-16 22:14:48
Assigner snyk
State PUBLISHED

Description

All versions of package path-parse are vulnerable to Regular Expression Denial of Service (ReDoS) via splitDeviceRe, splitTailRe, and splitPathRe regular expressions. ReDoS exhibits polynomial worst-case time complexity.