GitHub Advisoryadvisory · npm

GHSA-x55w-vjjp-222r inflect vulnerable to Inefficient Regular Expression Complexity

HIGH Published 2021-09-29 Modified 2022-08-10 Official page ↗

Aliases: CVE-2021-3820
Ecosystem: npm
Packages: i
Severity: High
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses: CWE-1333
Reviewed: 2021-09-28

Affected packages

• npm i: < 0.3.7 → fixed in 0.3.7

Description

inflect is customizable inflections for nodejs. inflect is vulnerable to Inefficient Regular Expression Complexity

Related

Alias · CVE (1)

CVE-2021-3820 inflect is vulnerable to Inefficient Regular Expression Complexity vulnerability

Weakness · CWE (1)

CWE-1333 Inefficient Regular Expression Complexity weakness

References