GitHub Advisoryadvisory · npm

GHSA-whgm-jr23-g3j9 Uncontrolled Resource Consumption in ansi-html

HIGH Published 2021-09-02 Modified 2021-09-07 Official page ↗
Aliases
CVE-2021-23424
Ecosystem
npm
Packages
ansi-html
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-400
Reviewed
2021-08-26

Affected packages

• npm ansi-html: < 0.0.8 → fixed in 0.0.8

Description

This affects all versions of package ansi-html. If an attacker provides a malicious string, it will get stuck processing the input for an extremely long time.

Related

Alias · CVE (1)

  • CVE-2021-23424 This affects all versions of package ansi-html. vulnerability

Weakness · CWE (1)

  • CWE-400 Uncontrolled Resource Consumption weakness

References