What is GHSA-hf66-r44g-p7j9?

GHSA-hf66-r44g-p7j9 is a security advisory published by GitHub Security Advisories with High severity. Inefficient Regular Expression Complexity in handsontable

Which CVE IDs does GHSA-hf66-r44g-p7j9 cover?

GHSA-hf66-r44g-p7j9 covers the following CVE IDs: CVE-2021-23446. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-hf66-r44g-p7j9?

GHSA-hf66-r44g-p7j9 has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

Which products are affected by GHSA-hf66-r44g-p7j9?

GHSA-hf66-r44g-p7j9 affects 1 product, including: npm/handsontable:\u003c 10.0.0.

GHSA-hf66-r44g-p7j9HighCVSS 7.5

Inefficient Regular Expression Complexity in handsontable

Vendor

GitHub Security Advisories

Published

September 30, 2021

Last Modified

September 5, 2023

🔗 CVE IDs covered (1)

CVE-2021-23446 →

📋 Description

The package handsontable from 0 and before 10.0.0 are vulnerable to Regular Expression Denial of Service (ReDoS) in Handsontable.helper.isNumeric function.

🎯 Affected products1

npm/handsontable:< 10.0.0

🔗 References (10)

https://nvd.nist.gov/vuln/detail/CVE-2021-23446
https://github.com/handsontable/handsontable/issues/8752
https://github.com/handsontable/handsontable/pull/8742
https://snyk.io/vuln/SNYK-JS-HANDSONTABLE-1726770
https://snyk.io/vuln/SNYK-DOTNET-HANDSONTABLE-1726793
https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARS-1726795
https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-1726796
https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBHANDSONTABLE-1726794
https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1726797
https://github.com/advisories/GHSA-hf66-r44g-p7j9