Regular Expression Denial of Servicedate-and-time
date-and-time is a package for manipulating date and time. In date-and-time before version 0.14.2, there a regular expression involved in parsing which can be exploited to to cause a denial of service.
Upgrade to version version 0.14.2 or later.
Have content suggestions? Send them to [email protected]
publishedAdvisory PublishedDec 30th, 2020
reportedReported by AnonymousDec 30th, 2020