CVE-2017-16115CWE-400

The timespan module is vulnerable to regular expression denial of service

published June 7, 2018

CVSS
—
EPSS
1%
Percentile
73.7
In the wild
Unconfirmed
What it is

The timespan module is vulnerable to regular expression denial of service. Given 50k characters of untrusted user input it will block the event loop for around 10 seconds.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01479 · 73.7th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2018-06-07T02:00Z
EPSS history
Timeline
  • 07 JUN 02:00Z
    The timespan module is vulnerable to regular expression denial of service
    cvelistv5