Seal Security

CVE-2021-3777

nodejs-tmpl is simple string formatting. tmpl is vulnerable to Inefficient Regular Expression Complexity which may lead to resource exhaustion.

Patch Available

Fix available through Seal Security. No upgrade required, protect your application instantly.

Vulnerability Details

Score

7.5

Score Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Versions

tmpl < 1.0.5

Severity

High

Ecosystem

JavaScript

Publish Date

September 20, 2021

Modified Date

November 7, 2023