Approved changes feed: RSS · Atom

cpe:2.3:a:hackerone:timespan_node_module:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorHackerone (9b72fff1-532f-502a-8030-14fc4a21dd17)
ProductTimespan Node Module (9e069528-bcb5-53f6-aeef-d0015b44e892)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-16115 vulnerable 2026-06-08 05:09:00.048242 Details available
The timespan module is vulnerable to regular expression denial of service. Given 50k characters of untrusted user input it will block the event loop for around 10 seconds.
Published: 2018-06-07T02:00:00.000Z
Updated: 2024-09-17T01:12:20.165Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.