~ / search / GHSA-whgm-jr23-g3j9

GHSA-whgm-jr23-g3j9

Uncontrolled Resource Consumption in ansi-html

Source: GitHub Advisory Database (reviewed) High CVE-2021-23424

Packages

EcosystemPackageAffectedFixed in
npm ansi-html < 0.0.8 0.0.8

Details

As written in the advisory (Markdown source, shown as plain text).

This affects all versions of package ansi-html. If an attacker provides a malicious string, it will get stuck processing the input for an extremely long time.

References

External links from the advisory. They lead to third-party sites.