Read the docs

Npmjs

Records16All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high13CVSS 7.0–8.9

Exploited now

Npmjs records in CISA KEV

No Npmjs vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Npm 8 records MEDIUM Tar 3 records MEDIUM Arborist 2 records LOW Hosted-git-info 1 record LOW Npm-user-validate 1 record LOW Semver 1 record HIGH

Records

1 record in Hosted-git-info · all components

TI-2021-06057 CVE-2021-23362 · GHSA-43f8-2h32-f4cj

Regular expression denial of service (ReDoS) in hosted-git-info

Priority LOW 30

The package hosted-git-info before 3.0.8 are vulnerable to Regular Expression Denial of Service (ReDoS) via regular expression shortcutMatch in the fromUrl function in index.js.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.03612 Published 2021-03-23 Partial fix · 3.0.8, 2.8.9 CWE-1333
Open these records in search →