~ / search / GHSA-hf66-r44g-p7j9

GHSA-hf66-r44g-p7j9

Inefficient Regular Expression Complexity in handsontable

Source: GitHub Advisory Database (reviewed) High CVE-2021-23446

Packages

EcosystemPackageAffectedFixed in
npm handsontable < 10.0.0 10.0.0

Details

As written in the advisory (Markdown source, shown as plain text).

The package handsontable from 0 and before 10.0.0 are vulnerable to Regular Expression Denial of Service (ReDoS) in `Handsontable.helper.isNumeric` function.

References

External links from the advisory. They lead to third-party sites.