Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2021-29469

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-35q2-47q7-3pc3

Node-Redis potential exponential regex in monitor mode ### Impact When a client is in monitoring mode, the regex begin used to detected monitor messages could cause exponential backtracking on some strings. This issue could lead to a denial of service. ### Patches The problem was fixed in commit `2d11b6d` https://github.com/NodeRedis/node-redis/commit/2d11b6dc9b9774464a91fb4b448bad8bf699629e and was released in version `3.1.1`. ### References #1569 (GHSL-2021-026)

gitlab/npm/redis/CVE-2021-29469

Uncontrolled Resource Consumption When a client is in monitoring mode, the regex begin used to detected monitor messages could cause exponential backtracking on some strings. This issue could lead to a denial of service. The issue is patched