high7.5
CVE-2021-27405
A ReDoS (regular expression denial of service) flaw was found in the @progfay/scrapbox-parser package before 6.0.3 for Node.js.
Impact
A ReDoS (regular expression denial of service) flaw was found in the @progfay/scrapbox-parser package before 6.0.3 for Node.js.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Scrapbox-Parser Project | Scrapbox-Parser | before 6.0.3 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/progfay/scrapbox-parser/pull/519
- https://github.com/progfay/scrapbox-parser/pull/539
- https://github.com/progfay/scrapbox-parser/pull/540
- https://security.netapp.com/advisory/ntap-20210326-0002/
- https://github.com/progfay/scrapbox-parser/pull/519
- https://github.com/progfay/scrapbox-parser/pull/539
- https://github.com/progfay/scrapbox-parser/pull/540
- https://security.netapp.com/advisory/ntap-20210326-0002/