CVE-2021-23364

Regular Expression Denial of Service (ReDoS)

Medium · published April 28, 2021

CVSS v3.1
5.3
EPSS
2%
Percentile
84.5
In the wild
Unconfirmed
What it is

The package browserslist from 4.0.0 and before 4.16.5 are vulnerable to Regular Expression Denial of Service (ReDoS) during parsing of queries.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P
CVSS v4.0
Not supplied
EPSS
0.02480 · 84.5th percentile
Published
2021-04-28T15:35Z
EPSS history
Timeline
  • 28 APR 15:35Z
    Regular Expression Denial of Service (ReDoS)
    cvelistv5