CVE-2021-23343
Regular Expression Denial of Service (ReDoS)
All versions of package path-parse are vulnerable to Regular Expression Denial of Service (ReDoS) via splitDeviceRe, splitTailRe, and splitPathRe regular expressions. ReDoS exhibits polynomial worst-case time complexity.
CVSS 3.1 · 5.3 Medium
EPSS 2.2%
KEV · Not listed
Vendors
Products