GHSA-hf66-r44g-p7j9
Inefficient Regular Expression Complexity in handsontable
At a glance
- Published
- Updated
- CVE
- CVE-2021-23446
- CVSS_V3
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description
The package handsontable from 0 and before 10.0.0 are vulnerable to Regular Expression Denial of Service (ReDoS) in `Handsontable.helper.isNumeric` function.
Affected packages
| Package | Versions |
|---|---|
| npm · handsontable | introduced 0, fixed 10.0.0 |
References
- https://nvd.nist.gov/vuln/detail/CVE-2021-23446 ADVISORY
- https://github.com/handsontable/handsontable/issues/8752 WEB
- https://github.com/handsontable/handsontable/pull/8742 WEB
- https://github.com/handsontable/handsontable PACKAGE
- https://snyk.io/vuln/SNYK-DOTNET-HANDSONTABLE-1726793 WEB
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARS-1726795 WEB
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-1726796 WEB
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBHANDSONTABLE-1726794 WEB
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1726797 WEB
- https://snyk.io/vuln/SNYK-JS-HANDSONTABLE-1726770 WEB
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — GitHub Advisory Database |