Ecosyste.ms: Advisories
An open API service providing security vulnerability metadata for many open source software ecosystems.
Security Advisories: GSA_kwCzR0hTQS14NTV3LXZqanAtMjIycs0WAg
inflect vulnerable to Inefficient Regular Expression Complexity
inflect is customizable inflections for nodejs. inflect is vulnerable to Inefficient Regular Expression Complexity
Permalink: https://github.com/advisories/GHSA-x55w-vjjp-222rJSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS14NTV3LXZqanAtMjIycs0WAg
Source: GitHub Advisory Database
Origin: Unspecified
Severity: High
Classification: General
Published: over 2 years ago
Updated: over 1 year ago
CVSS Score: 7.5
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Identifiers: GHSA-x55w-vjjp-222r, CVE-2021-3820
References:
- https://nvd.nist.gov/vuln/detail/CVE-2021-3820
- https://github.com/pksunkara/inflect/commit/a9a0a8e9561c3487854c7cae42565d9652ec858b
- https://huntr.dev/bounties/4612b31a-072b-4f61-a916-c7e4cbc2042a
- https://github.com/advisories/GHSA-x55w-vjjp-222r
Blast Radius: 37.3
Affected Packages
npm:i
Dependent packages: 2,496Dependent repositories: 92,731
Downloads: 2,610,592 last month
Affected Version Ranges: < 0.3.7
Fixed in: 0.3.7
All affected versions: 0.2.0, 0.3.0, 0.3.1, 0.3.3, 0.3.4, 0.3.5, 0.3.6
All unaffected versions: 0.3.7