Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The is-svg package 2.1.0 through 4.2.1 for Node.js uses a regular expression that is vulnerable to Regular Expression Denial of Service (ReDoS). If an attacker provides a malicious string, is-svg will get stuck processing the input for a very long time.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Sindre Sorhus is-svg 安全漏洞
Vulnerability Description
Sindre Sorhus is-svg是 （Sindre Sorhus）开源的一个应用软件。提供检查字符串或缓冲区是否为SVG功能。 is-svg package 2.1.0 through 4.2.1 存在安全漏洞，攻击者可利用该漏洞提供了一个恶意字符串，导致is-svg很长一段时间内无法处理输入。
CVSS Information
N/A
Vulnerability Type
N/A