Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1

Export CSV
CVE-2020-26289

Regular expression Denial of Service in date-and-time

date-and-time is an npm package for manipulating date and time. In date-and-time before version 0.14.2, there a regular expression involved in parsing which can be exploited to to cause a denial of service. This is fixed in version 0.14.2.

CVSS 3.1 · 7.5 High EPSS 2.2% KEV · Not listed
Vendors
Date-and-time Project Redhat
Products
Date-and-time Openshift Container Storage