Fix CVE–2021–3777

[debricked-staging]

CVE–2021–3777

Vulnerable dependency:     tmpl (npm)    1.0.4

Vulnerability details

Description

NVD

nodejs-tmpl is vulnerable to Inefficient Regular Expression Complexity

GitHub

tmpl vulnerable to Inefficient Regular Expression Complexity which may lead to resource exhaustion

nodejs-tmpl is simple string formatting. tmpl is vulnerable to Inefficient Regular Expression Complexity which may lead to resource exhaustion.

CVSS details - 7.5

 

CVSS3 metrics
Attack Vector	Network
Attack Complexity	Low
Privileges Required	None
User interaction	None
Scope	Unchanged
Confidentiality	None
Integrity	None
Availability	High

References

    NVD - CVE-2021-3777
    tmpl vulnerable to Inefficient Regular Expression Complexity which may lead to resource exhaustion · CVE-2021-3777 · GitHub Advisory Database · GitHub
    fix potential dos in regex · daaku/nodejs-tmpl@4c654e4 · GitHub
    Inefficient Regular Expression Complexity vulnerability found in nodejs-tmpl

 

Related information

📌 Remember! Check the changes to ensure they don't introduce any breaking changes.
📚 Read more about the CVE