Uncontrolled Resource Consumption in locutus

高危 7.5CVE-2021-23392 · GHSA-39q4-p535-c852 · SNYK-JS-LOCUTUS-1090597 · Published 08/06/2021 · updated 17/06/2026

要点

Package	Affected versions	Patched versions
locutus locutus	`< 2.0.15`	`2.0.15`
locutus npm	`< 2.0.15`	`2.0.15`

The package locutus before 2.0.15 is vulnerable to Regular Expression Denial of Service (ReDoS) via the gopher_parsedir function.

NVD description

The package locutus before 2.0.15 are vulnerable to Regular Expression Denial of Service (ReDoS) via the gopher_parsedir function.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

< 2.0.15

2.0.15

npm

< 2.0.15

2.0.15

locutus 的其他漏洞

查看全部 →