Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2023-25166

Regular Expression Denial of Service (ReDoS) Vulnerability

Description

formula is a math and string formula parser. In versions prior to 3.0.1 crafted user-provided strings to formula's parser might lead to polynomial execution time and a denial of service. Users should upgrade to 3.0.1+. There are no known workarounds for this vulnerability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

hapijs formula

  • < 3.0.1affected

References