CVE-2024-21538

Published

Last updated

NVD

https://nvd.nist.gov/vuln/detail/CVE-2024-21538

CGA ID

CGA-f6m6-7phg-3hp8

Severity

7.5

High

CVSS V3

Summary

Regular Expression Denial of Service (ReDoS) in cross-spawn

Description

Versions of the package cross-spawn before 7.0.5 are vulnerable to Regular Expression Denial of Service (ReDoS) due to improper input sanitization. An attacker can increase the CPU usage and crash the program by crafting a very large and well crafted string.

References

Affected packages

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

Safe Source for Open Source™

Media Kit Contact Us

Private Policy

CVE-2024-21538

Severity

Summary

Description

References

Affected packages

Product

Why Chainguard

Customers

Company

Resources