What is GHSA-x55w-vjjp-222r?

GHSA-x55w-vjjp-222r is a security advisory published by GitHub Security Advisories with High severity. inflect vulnerable to Inefficient Regular Expression Complexity

Which CVE IDs does GHSA-x55w-vjjp-222r cover?

GHSA-x55w-vjjp-222r covers the following CVE IDs: CVE-2021-3820. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-x55w-vjjp-222r?

GHSA-x55w-vjjp-222r has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

Which products are affected by GHSA-x55w-vjjp-222r?

GHSA-x55w-vjjp-222r affects 1 product, including: npm/i:\u003c 0.3.7.

GHSA-x55w-vjjp-222rHighCVSS 7.5

inflect vulnerable to Inefficient Regular Expression Complexity

Vendor

GitHub Security Advisories

Published

September 29, 2021

Last Modified

January 29, 2023

🔗 CVE IDs covered (1)

CVE-2021-3820 →

📋 Description

inflect is customizable inflections for nodejs. inflect is vulnerable to Inefficient Regular Expression Complexity

🎯 Affected products1

npm/i:< 0.3.7

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2021-3820
https://github.com/pksunkara/inflect/commit/a9a0a8e9561c3487854c7cae42565d9652ec858b
https://huntr.dev/bounties/4612b31a-072b-4f61-a916-c7e4cbc2042a
https://github.com/advisories/GHSA-x55w-vjjp-222r