CVE-2021-33502
24.05.2021, 16:15
The normalize-url package before 4.5.1, 5.x before 5.3.1, and 6.x before 6.0.1 for Node.js has a ReDoS (regular expression denial of service) issue because it has exponential performance for data: URLs.Enginsight
| Vendor | Product | Version |
|---|---|---|
| normalize-url_project | normalize-url | 4.3.0 ≤ 𝑥 < 4.5.1 |
| normalize-url_project | normalize-url | 5.0.0 ≤ 𝑥 < 5.3.1 |
| normalize-url_project | normalize-url | 6.0.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| node-got |
| ||||||||||||||||||||||||
| node-yarnpkg |
|
Common Weakness Enumeration