CVE-2018-1109CWE-185
A vulnerability was found in Braces versions 2.2.0 and above, prior to 2.3.1
published March 30, 2021
What it is
A vulnerability was found in Braces versions 2.2.0 and above, prior to 2.3.1. Affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS) attacks.
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.01389 · 71.9th percentile
- Weakness
- CWE-185 · Incorrect Regular Expression
- Published
- 2021-03-30T01:52Z
EPSS history
Timeline