Read the docs

Litejs

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Litejs records in CISA KEV

No Litejs vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Uri-template-lite 1 record LOW

Records

1 record

TI-2021-19302 CVE-2021-43309 · GHSA-chw2-6c7r-37p7

ReDoS in uri-template-lite URI.expand function

Priority LOW 35

An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the uri-template-lite npm package, when an attacker is able to supply arbitrary input to the "URI.expand" method

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00993 Published 2022-08-24 Fixed in 22.9.0 CWE-1333
Open these records in search →