Skip to content
Sign in
5.3 Medium

CVE-2021-23392 The package locutus before 2.0.15 are vulnerable to Regular Expression Denial of Service (ReDoS) via the gopher_parsedir…

Description

The package locutus before 2.0.15 are vulnerable to Regular Expression Denial of Service (ReDoS) via the gopher_parsedir function.

Affected products and versions

Product Affected versions Fixed in
locutus 2.0 earliest → < 2.0.15 2.0.15

Other CVEs of locutus

The 2 CVEs of locutus →
CVE-2020-7719 Versions of package locutus before 2.0.12 are vulnerable to prototype Pollution via the php.strings.parse_str function 9.8 Critical
Track this CVE