HO
Product
Hosted-git-info
by Npmjs · last CVE Mar 23, 2021
1
CVEs
0
On KEV
5.3
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 1Low 0
Watch

Add Hosted-git-info to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-23362
5.3
4%
Mar 23
The package hosted-git-info before 3.0.8 are vulnerable to Regular Expression Denial of Service (ReDoS) via regular expression shortcutMatch in the fromUrl function in index.js
Affected: 2.0.0 before 2.8.9; 3.0.0 before 3.0.8
Showing 1