Approved changes feed: RSS · Atom
cpe:2.3:a:denosaurs:emoji:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Denosaurs (9f8e98da-7f5e-5a90-9b57-beaf02d3d868) |
|---|---|
| Product | Emoji (5de067cb-2167-56f5-a5b0-ef039cde6784) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/denosaurs/emoji |
purl2cpe | 2026-06-01 10:12:19.389516 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-30858 |
vulnerable | 2026-06-08 06:04:41.225310 |
Denosaurs emoji has ReDoS vulnerability in `replace` function
MEDIUM (5.3)
The Denosaurs emoji package provides emojis for dinosaurs. Starting in version 0.1.0 and prior to version 0.3.0, the reTrimSpace regex has 2nd degree polynomial inefficiency, leading to a delayed response given a big payload. The issue has been patched in 0.3.0. As a workaround, avoid using the `replace`, `unemojify`, or `strip` functions.
Published: 2023-04-28T20:49:26.858Z
Updated: 2025-01-30T18:44:30.234Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.