CVE-2023-26115

CVSS V2 None CVSS V3 None

Description

All versions of the package word-wrap are vulnerable to Regular Expression Denial of Service (ReDoS) due to the usage of an insecure regular expression within the result variable.

Overview

CVE ID
CVE-2023-26115

Assigner
snyk

Vulnerability Status
PUBLISHED

Published Version
2023-06-22T05:00:01.472Z

Last Modified Date
2023-06-22T05:00:01.472Z

Weakness Enumerations

CWE	URL
CWE-1333	http://cwe.mitre.org/data/definitions/1333.html

References

Reference URL	Reference Tags
https://security.snyk.io/vuln/SNYK-JS-WORDWRAP-3149973
https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-4058657
https://github.com/jonschlinkert/word-wrap/blob/master/index.js%23L39
https://github.com/jonschlinkert/word-wrap/releases/tag/1.2.4
https://security.netapp.com/advisory/ntap-20240621-0006/

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2023-26115
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-26115

History

Created	Old Value	New Value	Data Type	Notes
2024-06-24 23:17:54				Added to TrackCVE