CVE-2021-3777

nodejs-tmpl is vulnerable to Inefficient Regular Expression Complexity

Score

CVSS 3.1 7.5 High

Status

Modified - security@huntr.dev

Published

2021-09-15

Last modified

2024-08-03

Weaknesses

CWE-1333

Affected products

• Daakunodejs-tmpl (Daaku)
• Tmpl (Tmpl Project)

References

• https://github.com/daaku/nodejs-tmpl/commit/4c654e4d1542f329ed561fd95ccd80f30c6872d6
• https://huntr.dev/bounties/a07b547a-f457-41c9-9d89-ee48bee8a4df