CVE-2021-3807CWE-1333

CVE-2021-3807

High · published September 17, 2021

CVSS v3.1

7.5

EPSS

4%

Percentile

89.3

In the wild

Unconfirmed

What it is

ansi-regex is vulnerable to Inefficient Regular Expression Complexity

The record

Technical detail

CVSS v3.1: 7.5 · HIGH
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0: Not supplied
EPSS: 0.03552 · 89.3th percentile
Weakness: CWE-1333 · Inefficient Regular Expression Complexity
Published: 2021-09-17T11:15Z

Affected products (5)

Product	Versions	Fixed in
ansi-regex_project/ansi-regex	≥ 4.0.0, < 4.1.1	4.1.1
ansi-regex_project/ansi-regex	all versions	—
ansi-regex_project/ansi-regex	all versions	—
ansi-regex_project/ansi-regex	all versions	—
oracle/communications_cloud_native_core_policy	all versions	—

References (8)

https://github.com/chalk/ansi-regex/commit/8d1d7cdb586269882c4bdc1b7325d0c58c8f76f9 · [email protected]https://huntr.dev/bounties/5b3cf33b-ede0-4398-9974-800876dfd994 · [email protected]https://security.netapp.com/advisory/ntap-20221014-0002/ · [email protected]https://www.oracle.com/security-alerts/cpuapr2022.html · [email protected]https://github.com/chalk/ansi-regex/commit/8d1d7cdb586269882c4bdc1b7325d0c58c8f76f9 · af854a3a-2127-422b-91ae-364da2661108 https://huntr.dev/bounties/5b3cf33b-ede0-4398-9974-800876dfd994 · af854a3a-2127-422b-91ae-364da2661108 https://security.netapp.com/advisory/ntap-20221014-0002/ · af854a3a-2127-422b-91ae-364da2661108 https://www.oracle.com/security-alerts/cpuapr2022.html · af854a3a-2127-422b-91ae-364da2661108

EPSS history

Timeline

17 SEP 00:00Z
Inefficient Regular Expression Complexity in chalk/ansi-regex
cvelistv5