high7.5
CVE-2021-40660
Regular expression denial of service in Delight Nashorn Sandbox
Impact
An issue was discovered in Delight Nashorn Sandbox. There is an ReDoS vulnerability that can be exploited to launching a denial of service (DoS) attack.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | org.javadelight:delight-nashorn-sandbox | < 0.3.1 | 0.3.1 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Javadelight | Nashorn Sandbox | Version 0.2.0 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://github.com/javadelight/delight-nashorn-sandbox/issues/117
- https://github.com/advisories/GHSA-38j3-6fm8-pfgc
- https://nvd.nist.gov/vuln/detail/CVE-2021-40660
- https://github.com/javadelight/delight-nashorn-sandbox/issues/117#issuecomment-1564983722
- https://github.com/javadelight/delight-nashorn-sandbox/pull/139
- https://github.com/javadelight/delight-nashorn-sandbox/commit/b899b8ecad46090fdc042ac7683e1164114a69de
- https://github.com/javadelight/delight-nashorn-sandbox/releases/tag/0.3.1