GitHub Advisoryadvisory · Maven

GHSA-38j3-6fm8-pfgc Regular expression denial of service in Delight Nashorn Sandbox

HIGH Published 2022-06-15 Modified 2022-06-23 Official page ↗
Aliases
CVE-2021-40660
Ecosystem
Maven
Packages
org.javadelight:delight-nashorn-sandbox
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-1333
Reviewed
2022-06-17

Affected packages

• Maven org.javadelight:delight-nashorn-sandbox: < 0.3.1 → fixed in 0.3.1

Description

An issue was discovered in Delight Nashorn Sandbox. There is an ReDoS vulnerability that can be exploited to launching a denial of service (DoS) attack.

Related

Alias · CVE (1)

  • CVE-2021-40660 An issue was discovered in Delight Nashorn Sandbox 0.2.0. vulnerability

Weakness · CWE (1)

  • CWE-1333 Inefficient Regular Expression Complexity weakness

References