p PatchFirst

PatchFirst · Latest vulnerabilities

node-get-func-name vulnerabilities

Vulnerabilities published for node-get-func-name in the last 30 days: 0. Listed in the KEV catalogue: 0.

Filter vulnerabilities
Clear filters

Vulnerabilities: 1

  1. CVE-2023-43646

    High · CVSS 8.6EPSS 1.38%No fix published

    Inefficient Regular Expression Complexity in get-func-name

    get-func-name is a module to retrieve a function's name securely and consistently both in NodeJS and the browser. Versions prior to 2.0.1 are subject to a regular expression denial of service (redos) vulnerability which may lead to a denial of service when parsing malicious input. This vulnerability can be exploited when there is an imbalance in parentheses, which results in excessive backtracking and subsequently increases the CPU load and processing time significantly. This vulnerability can be triggered using the following input: '\t'.repeat(54773) + '\t/function/i'. This issue has been addressed in commit `f934b228b` which has been includ

    Published Updated

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →