prafullkulkarni

CVE-2021-3803

1

Hi @dbashford A vulnerability has been reported on - cheerio-1.0.0-rc.2.tgz -> css-select-1.2.0.tgz -> nth-check-1.0.2.tgz nth-check is vulnerable to Inefficient Regular Expression Complexity https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-3803

CVE-2021-23362

5

Hi, A vulnerability has been reported on hosted-git-info The package hosted-git-info before 3.0.8 are vulnerable to Regular Expression Denial of Service (ReDoS) via regular expression shortcutMatch in the fromUrl function...

CVE-2021-33623

2

Hi @dbashford A vulnerability has been reported on - meow-3.7.0.tgz -> trim-newlines-1.0.0.tgz The trim-newlines package before 3.0.1 and 4.x before 4.0.1 for Node.js has an issue related to regular expression...

Hi, A vulnerability has been reported on SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service (memory consumption) via a crafted .xlsx document that is...

Hi, A vulnerability has been reported on jszip. This affects the package jszip before 3.7.0. Crafting a new zip file with filenames set to Object prototype values (e.g __proto__, toString,...

Hi, A vulnerability has been reported on css-what. The css-what package 4.0.0 through 5.0.0 for Node.js does not ensure that attribute parsing has Linear Time Complexity relative to the size...