VDB
GHSA-h6ch-v84p-w6p9
GHSA-h6ch-v84p-w6p9
PUBLISHED
CVSS 8.699999809265137 HIGH
Regular Expression Denial of Service (ReDoS)
Risk Scores
CVSS 4.0
8.699999809265137
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| chainguard | gitlab-rails-ce-fips-19.2 | * |
| chainguard | gitlab-rails-ce-fips-18.6 | * |
| chainguard | gitlab-rails-ce-18.1 | * |
| chainguard | gitlab-rails-ee-fips-17.3 | * |
| chainguard | gitlab-rails-ee-17.6 | * |
| chainguard | gitlab-rails-ee-17.4 | * |
| chainguard | gitlab-rails-ce-fips-18.2 | * |
| wolfi | code-server | * |
| chainguard | gitlab-rails-ce-fips-18.7 | * |
| chainguard | gitlab-rails-ce-18.8 | * |
| chainguard | gitlab-rails-ce-18.3 | * |
| chainguard | gitlab-rails-ce-19.1 | * |
| chainguard | gitlab-rails-ce-19.2 | * |
| chainguard | gitlab-rails-ee-17.1 | * |
| chainguard | gitlab-rails-ce-fips-18.8 | * |
| chainguard | gitlab-rails-ce-18.2 | * |
| chainguard | gitlab-rails-ce-fips-19.1 | * |
| chainguard | gitlab-rails-ce-fips-19.0 | * |
| chainguard | code-server | * |
| chainguard | gitlab-rails-ee-fips-17.7 | * |
…and 35 more
Timeline
- Jun 13, 2019 CVE Published
- Feb 24, 2021 CVE Updated
References
- https://bugzilla.redhat.com/show_bug.cgi?id=1552148 web
- https://www.npmjs.com/advisories/1631 web
- GitHub Advisory GHSA-h6ch-v84p-w6p9 vendor-advisory
- https://snyk.io/vuln/npm:diff:20180305 url
- https://www.whitesourcesoftware.com/vulnerability-database/WS-2018-0590 url
- https://github.com/kpdecker/jsdiff/commit/2aec4298639bf30fb88a00b356bf404d3551b8c0 fix