Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2021-29469

Potential exponential regex in monitor mode

Description

Node-redis is a Node.js Redis client. Before version 3.1.1, when a client is in monitoring mode, the regex begin used to detected monitor messages could cause exponential backtracking on some strings. This issue could lead to a denial of service. The issue is patched in version 3.1.1.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NodeRedis node-redis

  • < 3.1.1affected

References