CVE-2021-23392 The package locutus before 2.0.15 are vulnerable to Regular Expression Denial of Service (ReDoS) via the gopher_parsedir…

Description

The package locutus before 2.0.15 are vulnerable to Regular Expression Denial of Service (ReDoS) via the gopher_parsedir function.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
locutus 2.0	premières → < 2.0.15	2.0.15

Autres CVE de locutus

Les 2 CVE de locutus →

CVE-2020-7719 Versions of package locutus before 2.0.12 are vulnerable to prototype Pollution via the php.strings.parse_str function 9.8 Critique