GitHub Advisoryadvisory · npm

GHSA-49x3-8228-3w3m Inefficient Regular Expression Complexity in code-server

HIGH Published 2021-09-20 Modified 2021-09-20 Official page ↗

Aliases: CVE-2021-3810
Ecosystem: npm
Packages: code-server
Severity: High
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses: CWE-1333
Reviewed: 2021-09-20

Affected packages

• npm code-server: < 3.12.0 → fixed in 3.12.0

Description

code-server is vulnerable to Inefficient Regular Expression Complexity

Related

Alias · CVE (1)

CVE-2021-3810 code-server is vulnerable to Inefficient Regular Expression Complexity vulnerability

Weakness · CWE (1)

CWE-1333 Inefficient Regular Expression Complexity weakness

References