CVE-2021-27290

ssri 5.2.2-8.0.0, fixed in 8.0.1, processes SRIs using a regular expression which is vulnerable to a denial of service

published March 12, 2021

CVSS
—
EPSS
5%
Percentile
91.8
In the wild
Unconfirmed
What it is

ssri 5.2.2-8.0.0, fixed in 8.0.1, processes SRIs using a regular expression which is vulnerable to a denial of service. Malicious SRIs could take an extremely long time to process, leading to denial of service. This issue only affects consumers using the strict option.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04720 · 91.8th percentile
Published
2021-03-12T21:47Z
EPSS history
Timeline
  • 12 MAR 21:47Z
    ssri 5.2.2-8.0.0, fixed in 8.0.1, processes SRIs using a regular expression which is vulnerable to a denial of service
    cvelistv5