Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2021-23392

Regular Expression Denial of Service (ReDoS)

Description

The package locutus before 2.0.15 are vulnerable to Regular Expression Denial of Service (ReDoS) via the gopher_parsedir function.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a locutus

  • unspecified to < 2.0.15affected

References